high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | February 2006 (4.02) |
| Protection available since | 13 December 2005 10:45:15 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/QQRob-AD is a Trojan for the Windows platform.
Troj/QQRob-AD includes functionality to access the internet and communicate with a remote server via HTTP.
Troj/QQRob-AD may attempt to turn off various Anti-Virus and security related services in an attempt to stay undetected.
When first run Troj/QQRob-AD copies itself to the Windows system folder.
Troj/QQRob-AD may attempt to download additional files, called ccsys_control.dll and sysupdates.dll into the Windows system folder. At the time of writing, these files were unavailable for analysis.
The following registry entry is created to run Troj/QQRob-AD on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
zzzsoft
<pathname of the Trojan executable>
|
