high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 14 March 2007 06:57:09 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/VidCach-A is a Trojan for the Windows platform.
When run, the Trojan creates the following files:
<Windows>\iedrives.dll (Detected as Troj/VidCach-A)
<Windows>\msdrv.exe (Detected as Troj/VidCach-A)
<Windows>\msdrvctrl.exe (Detected as Troj/VidCach-A)
<System>\msdrives\driverpp.sys (Detected as Troj/RKProc-Fam)
<System>\msdrives\iedrives.dll (Detected as Troj/VidCach-A)
<System>\msdrives\msdrv.exe (Detected as Troj/VidCach-A)
<System>\msdrives\msdrvctrl.exe (Detected as Troj/VidCach-A)
The following registry entry is created to run msdrvctrl.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
msdrvctrl
<Windows>\msdrvctrl.exe
The file iedrives.dll is registered as a COM object, creating registry entries under:
HKCR\VPNS.VPNSApp\
HKCR\TypeLib\(A8954909-1F0F-41A5-A7FA-3B376D69E226)
HKCR\Interface\(9692BE2F-EB8F-49D9-A11C-C24C1EF734D5)
HKCR\Interface\(967A494A-6AEC-4555-9CAF-FA6EB00ACF91)
HKCR\CLSID\(366B2151-E1C7-44a3-86A3-E5686C2A3D2F)
|
