high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | June 2005 (3.94) |
| Protection available since | 6 May 2005 08:43:13 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Puper-E is a Trojan for Windows based systems.
The Trojan drops a file named intmonp.exe into the Windows system folder and then runs it. The intmonp.exe file monitors the Trojan and restarts it if it is terminated. The Trojan restarts the monitoring process if it is terminated and recreates it if deleted.
Troj/Puper-E also creates the following registry entry to ensure it is run when the infected computer starts:
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
notepad2.exe
popuper.exe
Troj/Puper-E also monitors this registry entry and will restore it if it is changed or deleted.
Troj/Puper-E may monitor internet sessions and log visited URLs.
|
