high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | September 2005 (3.97) |
| Protection available since | 12 July 2005 08:33:17 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/QQPass-J is a password-stealing Trojan for the Windows platform.
Troj/QQPass-J sends stolen details to a pre-specified email address.
When first run Troj/QQPass-J copies itself to:
<Windows>\winsys.exe
and creates the following file:
<System>\winet.dll
winet.dll is a data file, and can be safely deleted.
The following registry entries are created to run winset.exe on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
loadwin
winsys.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
exporet
winsys.exe
|
