Summary

Summary
Action
More Information
| How it spreads |
|
|---|---|
| Affected operating systems | Windows |
| Characteristics |
|
| Protection available since | 14 February 2008 04:56:11 (GMT) |
| Detected by | All Sophos products |
- Endpoint Security and Control 9.0
- Small business solutions 4.0
Action

Summary
Action
More Information
Please follow the instructions for removing infected executable files.
More Information
W32/Alman-E is a DLL component helper virus for the Windows platform.
Once installed, W32/Alman-E creates the file <System>\drivers\IsDrv122.sys. This file is detected as Troj/Rootkit-BZ.
W32/Alman-E includes functionality to:
- inject code into processes including EXPLORER.EXE
- access network shares protected by weak passwords
- downloads code from the internet
