Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | July 2005 (3.95) |
| Protection available since | 31 May 2005 18:08:01 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Nethief-N is a Trojan for the Windows platform.
When first run, Troj/Nethief-N will copy itself to the Windows system folder as System.exe. In order to run automatically each time a user logs on, Troj/Nethief-N will set the following registry entry:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
<Entry name>
System.exe
Troj/Nethief-N will download configuration files from a remote website. The Trojan may also attempt to download and run executable files.
