Troj/PWS-ALA

Category: Viruses and SpywareProtection available since:16 Mar 2007 00:00:00 (GMT)
Type: TrojanLast Updated:16 Mar 2007 00:00:00 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/PWS-ALA is a Trojan for the Windows platform that steals passwords for online games.

Troj/PWS-ALA includes functionality to access the internet and communicate with a remote server via HTTP.

When first run Troj/PWS-ALA copies itself to <Windows>\msccrt.exe and creates the file <System>\msccrt.dll. The file msccrt.dll is also detected as Troj/PWS-ALA.

The following registry entry is created to run msccrt.exe on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
msccrt
<Windows>\msccrt.exe