Troj/Sharp-M

Please follow the instructions for removing Trojans.

Troj/Sharp-M is a Trojan for the Windows platform.

Troj/Sharp-M includes functionality to access the internet and communicate with a remote server via HTTP.

Troj/Sharp-M also has backdoor functionality which will allow a remote user to perform the following activities:

Create/delete files and folders
Run commands
Upload/download files

When first run Troj/Sharp-M copies itself to:

<System>\ipconfx.exe
<System>\tcpic.exe

Troj/Sharp-M will attempt autostart itself by creating the following registry entry:

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
(Default)
<System>\ipconfx.exe

Troj/Sharp-M may also modify the following regsitry entry:

HKCR\txtfile\shell\open\command