Sophos

Troj/Weasyw-B

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Protection available since 11 August 2005 11:23:22 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/Weasyw-B is a backdoor Trojan.

Troj/Weasyw-B contacts a preconfigured remote internet site and downloads instructions. The Trojan can perform a number of actions based on the downloaded commands.

The Trojan may download and execute EXE files (the Trojan may update itself in this way) and change the Microsoft Internet Explorer settings in the registry so that the default start and search pages are directed to URLs defined within the text file. Troj/Weasyw-B is a backdoor Trojan.

Troj/Weasyw-B contacts a preconfigured remote internet site and downloads instructions. The Trojan can perform a number of actions based on the downloaded commands.

The Trojan may download and execute EXE files (the Trojan may update itself in this way) and change the Microsoft Internet Explorer settings in the registry so that the default start and search pages are directed to URLs defined within the text file.

The following registry entry is created to run Troj/Weasyw-B on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
msresear
<pathname of the Trojan executable>

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer