Sophos

Troj/Hupigon-ES

Aliases
  • BackDoor-AWQ
  • trojan
  • Backdoor.Graybird
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from May 2006 (4.05)
Protection available since 12 March 2006 14:42:13 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Hupigon-ES is a backdoor Trojan for the Windows platform.

Troj/Hupigon-ES includes functionality to access the internet and communicate with a remote server via HTTP.

When first run Troj/Hupigon-ES copies itself to <Windows>\caner.exe.

The file caner.exe is registered as a new system driver service named "CanerServer", with a display name of "CanerServer" and a startup type of automatic, so that it is started automatically during system startup. Registry entries are created under:

HKLM\SYSTEM\CurrentControlSet\Services\CanerServer\

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer