Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | July 2005 (3.95) |
| Protection available since | 18 May 2005 02:04:21 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Perda-B is a Trojan for the Windows platform.
Troj/Perda-B then recreates the following registry entry in order to run itself each time a user logs on:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Norton Antivirus 7.0a
<Path to Trojan>
Troj/Perda-B may also store information related to the Trojans operation under the following registry entry:
HKLM\SYSTEM\CurrentControlSet\Control\Norton Antivirus 7.0a
Troj/Perda-B will also attempt to disable Windows XP's firewall.
Troj/Perda-B serves as a proxy, allowing remote users the ability to route HTTP traffic through the infected computer. The Trojan may also accept commands from remote users.
