high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 16 October 2007 12:31:43 (GMT) |
| Detected by | All Sophos products |
Sophos beta program
- Endpoint Security and Control 9.0
- Small business solutions 4.0
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Renos-AH is a Trojan for the Windows platform.
When Troj/Renos-AH is installed it creates the file <System>\sttwrd.dll.
The file sttwrd.dll is detected as Troj/Renos-AG.
The file sttwrd.dll is registered as a COM object, creating registry entries under:
HKCR\CLSID\{f0c5ef8b-f4bb-4612-9ea8-361fff3da3d5}
The following registry entry is created to run code exported by sttwrd.dll on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{f0c5ef8b-f4bb-4612-9ea8-361fff3da3d5}
designers
Registry entries are created under:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows Safety Alert
Troj/Renos-AH provides an uninstall option which can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as "Windows Safety Alert".
|
