high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | September 2005 (3.97) |
| Protection available since | 24 February 2005 10:52:21 (GMT) |
| Last updated | 9 August 2005 17:47:01 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Sophos Anti-Virus products detect members of the Troj/Borobot family of Trojans as Troj/Borobt-Gen.
Members of Troj/Borobot family allow unauthorised remote access to the computer via a network and may download and execute files from remote websites if instructed to do so. Sophos Anti-Virus products detect members of the Troj/Borobot family of Trojans as Troj/Borobt-Gen.
Members of Troj/Borobot family usually copy themselves to either the Windows system folder or to the folder Application Data\Microsoft\Internet Explorer, often using the filename LSVCHOST.EXE. Members of Troj/Borobot family usually then set an entry in the registry in order to run the copy of the worm on system startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Members of Troj/Borobot family usually act as a proxy server, routing information from a remote user to their chosen destination.
Members of Troj/Borobot family also connect to an IRC server and may download files from remote locations and execute them if instructed to do so.
|
