Sophos

Troj/RpcLsa-A

Category
Type
What to do
Prevalence low high

Summary

 
Protection available since 20 May 2004 13:39:51 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

Please follow the instructions for removing Trojans.

Download and install the Microsoft patch mentioned above.

More Information

Troj/RpcLsa-A is a malicious executable using the lsasrv.dll RPC buffer overflow
exploit vulnerability specified in MS04-011. It is used by hackers to gain remote
shell access to target system.

Although the executable itself does not have malicious effect on the infected computer, it is often dropped by Trojans or installed by hackers to mount further attacks from the infected system.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer