high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Included in our products from | December 2005 (4.00) |
| Protection available since | 10 November 2005 03:04:14 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Bdoor-MC is a backdoor Trojan for the Windows platform.
When first run Troj/Bdoor-MC copies itself to <System>\<random>\<random>.exe.
The following registry entry is created to run the copy on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
wuauon
<System>\<random>\<random filename>.exe
The file is registered as a COM object, creating registry entries under:
HKCR\CLSID\(141558D2-4E64-D9D0-5657-0F5E9E421843)
The following registry entry is set, affecting internet security:
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer
|
