Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Protection available since | 26 July 2007 05:40:55 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Riler-AA is a proxy Trojan for the Windows platform.
When run Troj/Riler-AA creates the files:
<System>\rsvp32.dll - detected as Troj/Riler-AA
<System>\sporder.dll - not malicious
Troj/Riler-AA attempts to register rsvp322.dll as a Winsock layered service provider and may create the following registry entry if the registration fails:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Window\AppInit_Dlls
rsvp322.dll
