Sophos

Troj/Cheuko-A

Aliases
  • Trojan-Downloader.Win32.Small.ank
  • MultiDropper-GP.d
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from October 2005 (3.98)
Protection available since 1 July 2005 16:56:03 (GMT)
Last updated 19 August 2005 13:52:02 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Cheuko-A is a Trojan for the Windows platform.

Troj/Cheuko-A includes functionality to download, install and run new software.

When Troj/Cheuko-A is installed the following files are created:

<Windows folder>\svchost.exe - this file is also detected as Troj/Cheuko-A
<Windows system folder>\zgfghghgfo.dll - this file may be deleted

The following registry entry is created to run svchost.exe on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Auto Updates
svchost.exe

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer