high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | February 2006 (4.02) |
| Protection available since | 24 November 2005 04:02:27 (GMT) |
| Last updated | 20 December 2005 22:03:08 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Lineage-ON is a password stealing Trojan for the Windows platform that attempts to steal passwords associated with the game called "Lineage".
Troj/Lineage-ON includes functionality to access the internet and communicate with a remote server via HTTP.
When first run Troj/Lineage-ON copies itself to <System>\Kerne121.exe and creates the file <System>\microsoftie21.dll. microsoftie21.dll is the keylogging component of the Trojan and is also detected as Troj/Lineage-ON.
The following registry entry is created to run Kerne121.exe on startup:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows
load
<System>\Kerne121.exe
|
