Troj/TSpy-B

Category	Viruses and Spyware
Type	Trojan
What to do	If you've received an alert for a virus or spyware, then follow the instructions for removing the threat.
Prevalence	low high

Summary


Affected operating systems	Windows
Characteristics	Installs itself in the registry
Included in our products from	June 2006 (4.06)
Protection available since	8 April 2006 16:08:53 (GMT)
Last updated	19 April 2006 12:42:11 (GMT)
Detected by	All Sophos products

Troj/TSpy-B is a keylogging Trojan. The Trojan can send the log to a predefined email address.

When Troj/TSpy-B is installed on the user's computer the following registry entries may be created

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Tspy
<Path to Trojan>

HKLM\SOFTWARE\Microsoft\Windows\TPSY\Settings
autostart
Y

HKLM\SOFTWARE\Microsoft\Windows\TPSY\Settings
currentlocation
<Path to Trojan>

Get reports about the latest virus and spyware threats delivered to your computer