high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | February 2006 (4.02) |
| Protection available since | 6 January 2006 23:52:51 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Daemoni-T is a backdoor Trojan which allows a remote intruder to gain access and control over the computer.
Troj/Daemoni-T includes functionality to access the internet and communicate with a remote server via HTTP.
When first run Troj/Daemoni-T copies itself to <System>\msvcr32.exe.
The following registry entry is created to run msvcr32.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
objupdate
<System>\msvcr32.exe
The following registry entry is set, affecting internet security:
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\List\<Windows>\
System32
msvcr32.exe
<System>\msvcr32.exe:*:Enabled:<System>\msvcr32.exe
|
