high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | June 2007 (4.18) |
| Protection available since | 30 April 2007 09:45:38 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Starter-F is a Trojan for the Windows platform.
When run, it copies itself to <System>\FLASH32.COM and creates the file <System>\BLOCKS.EXE. The file BLOCKS.exe is not malicious.
The following registry entry is created to run FLASH32.COM on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Flash32
<System>\FLASH32.COM -s
The following registry entry is set:
HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Run
Flash32
<System>\FLASH32.COM -s
|
