Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Protection available since | 24 October 2005 13:03:37 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/QQPass-AF is a Trojan for the Windows platform. It will monitor for windows
related to certain chat programs, and attempt to log the keystrokes for it. The
information will then be sent to a remote server.
When first run Troj/QQPass-AF copies itself to <System>\fswan.exe.
The following registry entry is created to run fswan.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SysDesktop
<System>\fswan.exe

