high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 29 November 2004 16:23:46 (GMT) |
| Detected by | All Sophos products |
Sophos beta program
- Endpoint Security and Control 9.0
- Small business solutions 4.0
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/TCXMedi-D is a Trojan related to pornographic material.
Troj/TCXMedi-D downloads an image from an adult website, storing it as SETUPZMP.DLL in the Windows folder.
Troj/TCXMedi-D sets the following registry entry in order to run itself on system startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
cmsound
<Trojan filename including path>
The Trojan may also create registry entries under HKCU\Software\Microsoft\MSDN\DevCTR.
|
