Sophos

Troj/Ghudl-C

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from March 2006 (4.03)
Protection available since 19 January 2006 14:24:38 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Ghudl-C is a Trojan for the Windows platform.

Troj/Ghudl-C includes functionality to access the internet and communicate with a remote server via HTTP.

Troj/Ghudl-C may set the following registry entry to run <Windows>\cpds.exe on system startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
cpds
<Windows>\cpds.exe

Troj/Ghudl-C may set some of the following registry entries:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion
cpds

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion
RD

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion
Dset

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer