high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | February 2006 (4.02) |
| Protection available since | 19 December 2005 04:39:08 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/QQPass-AO is a Trojan for the Windows platform.
When first run Troj/QQPass-AO copies itself to:
<Temp>\temp~3
<System>\ravseteyi.exe
and creates the following files:
<System>\temp.jpg
<System>\winsyei.dll
The files temp.jpg and winsyei.dll are clean and can simply be deleted.
The following registry entry is created to run ravseteyi.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Rapdatei
<System>\ravseteyi.exe
Troj/QQPass-AO attempts to terminate several processes and services related to anti-virus and security programs.
|
