Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Protection available since | 31 January 2005 21:22:47 (GMT) |
| Last updated | 15 September 2005 12:35:30 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/PPdoor-A is a backdoor Trojan for the Windows platform. It will attempt to allow others remote access and to use clients' computers for further attacks. It may also attempt to disable security related software, such as Windows XP Firewall.
Troj/PPdoor-A will attempt to drop the following file:
<system32>/ntrshp.dll
And also it may start a service in the name "NTWS32", and attempt to create the following auto start registry in:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellService
ObjectDelayLoad
