Sophos

Troj/PPdoor-A

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Protection available since 31 January 2005 21:22:47 (GMT)
Last updated 15 September 2005 12:35:30 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/PPdoor-A is a backdoor Trojan for the Windows platform. It will attempt to allow others remote access and to use clients' computers for further attacks. It may also attempt to disable security related software, such as Windows XP Firewall.

Troj/PPdoor-A will attempt to drop the following file:

<system32>/ntrshp.dll

And also it may start a service in the name "NTWS32", and attempt to create the following auto start registry in:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellService
ObjectDelayLoad

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer