Sophos

WinDrive

Aliases
  • Application-WinDrives
Category
Type
What to do

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from October 2007 (4.22)
Protection available since 4 September 2007 19:30:49 (GMT)
Detected by Sophos Anti-Virus for Windows, versions 6 and 7 and PureMessage for Microsoft Exchange.

More Information

WinDrive is a hacking tool for the Windows platform.

When first run WinDrive copies itself to <Windows>\WinDrives.EXE.

The following registry entry is created to run WinDrives on startup:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
WinDrives
<Windows>\WinDrives.EXE

RSS|Atom
Get reports about the latest adware and potentially unwanted applications (PUAs) delivered to your computer