high
Summary
Summary
Action- More Information
| Detected by | All Sophos products |
|---|---|
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
Please read the instructions for removing Trojans.
More Information
Troj/Palukka is a backdoor Trojan that allows a remote user to access and control infected computers via IRC channels.
When first run it will copy itself to the Windows folder (the filename used is configurable) and may create a new entry in the system registry so that this file is run automatically each time the computer is restarted.
A new sub-key may be added to one of the following registry entries:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
Each time the server starts it will try to notify the remote user that the machine is accessible, either via IRC channels or email.
|
