Sophos

Troj/Fasong-B

Aliases
  • Trojan-PSW.Win32.Lmir.apk
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from February 2006 (4.02)
Protection available since 12 December 2005 09:02:58 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Fasong-B is a Trojan for the Windows platform.

When Troj/Fasong-B is installed the following files are created:

\Programma's\jajlee.dll
\Programma's\svchost.exe
\filedebug

Registry entries are created under:

HKCR\BFWorkFile1007PV\

The file jajlee.dll is registered as a COM object and ShellExecute hook, creating registry entries under:

HKCR\CLSID\(78E611A2-E484-4A0D-811E-C40100A3F452)
HKCR\jajlee.ShellExecuteHook1007\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer