high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Protection available since | 23 April 2005 17:09:51 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Witna-A is a Trojan for the Windows platform. The Trojan hooks into Internet Explorer as a Browser Helper Object and may download further files.
The Trojan sets the following registry entries:
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SW
DisplayName
Shopping Wizard
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SW
UninstallString
rundll32 url.dll,FileProtocolHandler <URL>
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SE
DisplayName
Search Extender
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SE
UninstallString
rundll32 url.dll,FileProtocolHandler <URL>
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\HSA
DisplayName
Home Search Assistent
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\HSA
UninstallString
rundll32 url.dll,FileProtocolHandler <URL>
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\
Browser Helper Objects\(B36BE120-95DE-5F02-4335-36B4124FB086)
HKLM\Software\Microsoft\Internet Explorer\URLSearchHooks
(B36BE120-95DE-5F02-4335-36B4124FB086)
HKCR\CLSID\(B36BE120-95DE-5F02-4335-36B4124FB086)
<several entries>
|
