high
Summary
Summary
Action- More Information
| How it spreads |
|
|---|---|
| Affected operating systems | Windows |
| Characteristics |
|
| Protection available since | 29 June 2008 16:23:07 (GMT) |
| Detected by | All Sophos products |
Sophos beta program
- Endpoint Security and Control 9.0
- Small business solutions 4.0
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Swizzor-NX is an adware Trojan for the Windows platform.
Troj/Swizzor-NX is installed by adware supported freeware or shareware applications.
The installer for the potentially unwanted application (PUA) NetPumper is known to install Troj/Swizzor-NX to:
<User>\Application Data\Web Okay Five 01
<User>\Application Data\Web Okay Five 01\Media Flap.exe
<User>\Application Data\Web Okay Five 01\Dash Wma.exe
<User>\Application Data\forkmesswin
<User>\Application Data\forkmesswin\cdrom upload file.exe
<User>\Application Data\forkmesswin\joy download acid.exe
<User>\Application Data\forkmesswin\leapzbbq.exe
<Program Files>\forkmesswin
<Program Files>\NetPumper\ZM\minime.exe
and create the following registry entry to run Troj/Swizzor-NX on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Five 01 else bias
<User>\Application Data\Web Okay Five 01\Media Flap.exe
When run Troj/Swizzor-NX injects its code into a hidden instance of Microsoft Internet Explorer.
|
