Antivirus and Security Software from Sophos

Sophos blogs

Troj/Stinx-E

Aliases
  • Breplibot
  • CME-589
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Protection available since 10 November 2005 10:25:49 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/Stinx-E is a backdoor Trojan for the Windows platform.

Troj/Stinx-E connects to one of several IP addresses and runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.

When first run Troj/Stinx-E copies itself to <System>\$sys$drv.exe.

Troj/Stinx-E can be instructed to delete, execute, and download and execute files. Troj/Stinx-E is a backdoor Trojan for the Windows platform.

Troj/Stinx-E connects to one of several IP addresses and runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.

When first run Troj/Stinx-E copies itself to <System>\$sys$drv.exe.

Troj/Stinx-E can be instructed to delete, execute, and download and execute files.

Troj/Stinx-E will attempt to circumvent the Windows Firewall if it is present by adding itself to the list of allowed programs.

Troj/Stinx-E may be stealthed on an infected system by exploiting Sony DRM (Digital Rights Management) software.

Troj/Stinx-E creates a Mutex variable named "SonyEnabled".

Troj/Stinx-E may arrive as an email attachment wherein it is claimed that the attached file is a photograph to be published that requires approval.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer