Sophos

Troj/Norat-A

Aliases
  • TrojanProxy.Win32.Mitglieder.bz
  • TROJ_MTGLDR.F
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Drops more malware
  • Installs itself in the registry
Protection available since 18 September 2004 16:26:30 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/Norat-A will attempt to hook into low level Windows functions to hide its own process and the processes of the dropped components.

Troj/Norat-A will copy itself into <Windows System> folder. The files it dropped can be located in <Windows System>\foo.exe and norat.exe.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer