high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | July 2005 (3.95) |
| Protection available since | 24 January 2005 21:31:26 (GMT) |
| Last updated | 27 May 2005 21:55:13 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Singu-P is a password-stealing Trojan for the Windows platform.
Troj/Singu-P steals passwords from email and MSN messenger accounts on the infected computer. The Trojan uploads its findings to a preconfigued website.
Troj/Singu-P copies itself to the Windows system folder and creates the following registry entry to ensure that it is run when a user logs on:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
gdien32
<System>\gdien32.exe
Troj/Singu-P creates a DLL file named lmrtend.dll also in the system folder and registers this component as a Browser Helper Object, creating registry entries under
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\
Browser Helper Objects\{A0496108-A6BA-93D6-E9DC-13309406392D}
HKCR\CLSID\{A0496108-A6BA-93D6-E9DC-13309406392D}
|
