Troj/FakeAle-CT is a Trojan for the Windows platform.
When run Troj/FakeAle-CT copies itself to (Temp)\_addon.exe and attempts to download code from the internet and store it to the file (User)\Application Data\Adsl Software Ltd\Winspywareprotect.exe.
Registry entries are created under:
HKCU\Software\Adsl Software Ltd\Installer
HKCU\Software\Adsl Software Ltd\WinSpywareProtect
More information can be found at this Sophos page.
Selasa, 01 Juli 2008
Langganan:
Posting Komentar
(
Atom
)
Tidak ada komentar :
Posting Komentar