high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 7 August 2005 14:30:11 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/NetDevil-A is a backdoor Trojan which allows a remote intruder to gain access and control over the computer.
When first run Troj/NetDevil-A copies itself to <System>\iexplorer.ie.
Troj/NetDevil-A sets the following registry entry so as to run itself on system startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
iexplorer=
<System>\iexplorer.ie
Troj/NetDevil-A sets the following registry entries so as to run the copy of itself correctly with the .ie extension:
HKCR\.ie\
(default)=
iefile
HKCR\iefile\shell\open\command\
(default)=
%1
The Trojan may attempt to terminate processes related to anti-virus and security applications.
|
