high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 3 September 2004 13:18:24 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Small-BA is a proxy Trojan for the Windows platform. Troj/Small-BA allows a malicious user to route information through an infected computer.
When executed the Trojan copies itself to the Windows system folder as WinDriv32.exe and then runs the copy which attempts to report the infection to a webpage.
In order to run automatically when Windows starts up Troj/Small-BA creates the following registry entries:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
WinDriv32 C:\WINDOWS\System32\WinDriv32.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
WinDriv32 C:\WINDOWS\System32\WinDriv32.exe.
|
