high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 13 April 2005 22:02:14 (GMT) |
| Last updated | 13 January 2006 10:33:39 (GMT) |
| Detected by | All Sophos products |
Sophos beta program
- Endpoint Security and Control 9.0
- Small business solutions 4.0
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Sharp-F is a backdoor Trojan for the Windows platform.
Troj/Sharp-F will copy itself to the Windows system folder as IMMS16.DLL and MCIOLES16.DLL or COMAPI.DLL and EULSASS.DLL. In order to run automatically each time a user logs on, Troj/Sharp-F will modify the following registry entry:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Userinit
<original registry entry data>,<path to Trojan>
Troj/Sharp-F will inject code into the EXPLORER.EXE processs.
|
