Sophos

Troj/PSW-ED

Aliases
  • Trojan-PSW.Win32.Lmir.xe
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from August 2007 (4.20)
Protection available since 18 June 2007 04:05:31 (GMT)
Last updated 18 June 2007 04:44:18 (GMT)
Detected by All Sophos products

Action

More Information

Troj/PSW-ED is a Trojan for the Windows platform.

When run Troj/PSW-ED copies itself to <Root>\patcher.scr and creates the file <Root>\patchar.ini. The file patchar.ini can be safely removed.

The following registry entry is set to run Troj/PSW-ED on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
game
patcher.scr

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer