high
Summary
Summary
Action- More Information
| Detected by | All Sophos products |
|---|---|
Sophos beta program
- Endpoint Security and Control 9.0
- Small business solutions 4.0
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
Please read the instructions for removing Trojans.
You will also need to edit the following registry key, if it is present.
At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.
Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.
Locate the HKEY_LOCAL_MACHINE key:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunService\systray
and remove the reference to 'systray'.
Close the registry editor and reboot your computer.
More Information
Troj/VB-CH is a backdoor Trojan which gives a remote intruder control over the infected computer.
On execution the Trojan creates the following registry entry to run itself on system start:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunService\systray
|
