high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | February 2006 (4.02) |
| Protection available since | 21 December 2005 06:05:04 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Lineage-KX is a password stealing Trojan for the Windows platform.
When Troj/Lineage-KX is installed it creates the file <System>\wintt1.dll.
The file wintt1.dll is registered as a COM object and ShellExecute hook,
creating registry entries under:
HKCR\CLSID\(44B40E3F-E91C-4ae3-89A6-1D1048A162A6)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
ShellExecuteHooks\(44B40E3F-E91C-4ae3-89A6-1D1048A162A6)
|
