Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Included in our products from | June 2008 (4.30) |
| Protection available since | 22 April 2008 19:05:15 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Rootkit-CL is a rootkit Trojan for the Windows platform.
Troj/Rootkit-CL is typically installed by other Trojans, for example Troj/PWS-ARA is known to install Troj/Rootkit-CL to:
<System>\winio32.sys
The Troj/Rootkit-CL executable is registered as a system driver service with a startup type of automatic, creating registry entries under:
HKLM\SYSTEM\CurrentControlSet\Services\Windows Installer
