high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | February 2006 (4.02) |
| Protection available since | 27 December 2005 14:54:39 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/MarktMan-C is a downloader Trojan for the Windows platform.
When first run Troj/MarktMan-C copies itself to <Windows>\lsass.exe.
The following registry entry is created to run lsass.exe on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Local Authority Service
<Windows>\lsass.exe
Troj/MarktMan-C may attempt to modify Internet Explorer's Start Page by setting the following registry entry:
HKCU\Software\Microsoft\Internet Explorer\Main
Start Page
<URL>
|
