Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 11 October 2008 15:49:07 (GMT) |
| Last updated | 15 December 2008 11:02:41 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/PWS-AUF is a password stealing Trojan for the Windows platform.
When Troj/PWS-AUF is installed the following files are created:
<Windows>\Help\<variable>.dll
<Windows>\Help\<variable>.exe
where <variable> is a filename consisting of upper-case letters and digits. Both files have the hidden and system attributes set.
The file <variable>.dll is registered as a COM object and shell extension, creating registry entries under:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
HKCR\CLSID\{1DBD6574-D6D0-4782-94C3-69619E719765}
