high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | February 2006 (4.02) |
| Protection available since | 2 December 2005 09:13:37 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Lineage-PN is a password stealing Trojan for the Windows platform that
attempts to steal passwords associated with the online game called "Lineage".
Troj/Lineage-PN includes functionality to access the internet and communicate with a remote server via HTTP.
When Troj/Lineage-PN is installed it creates the file <Temp>\<ORIGFILENAME>.DLL
The following registry entry is set to run <ORIGFILENAME>.DLL
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
winabc
"rundll32.exe <Temp>\<ORIGFILENAME>.DLL,InstallLaunchEv"
|
