Sophos

Troj/Agent-HPH

Aliases
  • Trojan-PSW.Win32.Papras.fs
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Included in our products from October 2008 (4.34)
Protection available since 8 September 2008 10:30:42 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Agent-HPH is a Trojan for the Windows platform.

Troj/Agent-HPH includes functionality to access the internet and communicate with a remote server via HTTP.

When first run Troj/Agent-HPH copies itself to <Windows>\9129837.exe and creates the following files:

<Current Folder>\abcdefg.bat
<Windows>\new_drv.sys

The file new_drv.sys is detected as Troj/Rootkit-DK.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer