Antivirus and Security Software from Sophos

Sophos blogs

Troj/PWS-ASR

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Protection available since 18 August 2008 09:26:54 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/PWS-ASR is an information stealing Trojan for the Windows platform.

When run Troj/PWS-ASR copies itself to <Windows>\java\<random characters>.exe and creates the file <Windows>\java\<random characters>.dll (also detected as Troj/PWS-ASR)

The following registry entries are set:

HKCR\CLSID\{9BF6F863-3702-4286-9EA8-0DEA5AC73C9C}\

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer