high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | March 2006 (4.03) |
| Protection available since | 13 January 2006 14:16:33 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/SmymKit-B is a Trojan for the Windows platform.
When first run Troj/SmymKit-B copies itself to:
<Windows>\system.exe
<System>\Agentsvr32.exe
and creates the following files:
\%CurrentFolder%\Smart-PS.exe
<System>\hInstance.dll
The following registry entry is created to run Agentsvr32.exe on startup:
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\(8C15971b-RKTP-4c82-8c07-7e181ea07608)
StubPath<System>\Agentsvr32.exe /hide
Registry entries are created under:
HKCU\Software\Yahoo\Pager\
|
