Sophos

Troj/SView-A

Aliases
  • Worm.Win32.Randex.d
  • W32/Slanper.worm.gen
  • Win32/Slanper.B
  • Backdoor.Roxy
  • BKDR_SONE.A
Category
Type
What to do
Prevalence low high

Summary

 
Protection available since 28 September 2003 09:47:21 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

Please follow the instructions for removing Trojans.

Please follow the instructions for removing Trojans.

Windows NT/2000/XP

In Windows NT/2000/XP you will also need to edit the following registry entry. The removal of this entry is optional in Windows 95/98/Me. Please read the warning about editing the registry.

At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.

Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.

Locate the HKEY_LOCAL_MACHINE entry:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\

and delete any reference to any file you removed.


Close the registry editor.

More Information

Troj/SView-A is a backdoor Trojan which allows unauthorised remote access to the computer over a network.

The Trojan adds an entry to the registry at

HKLM\Software\Microsoft\Windows\CurrentVersion\Run

to run itself on system restart.

It may also drop a file called magistr1.exe.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer