Sophos

Troj/Merein-C

Aliases
  • Trojan-Dropper.Win32.Agent.zxw
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from January 2009 (4.37)
Protection available since 22 November 2008 05:32:32 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Merein-C is a Trojan for the Windows platform.

The following registry entry is created to run Troj/Merein-C on startup:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Firewall auto setup
<pathname of the Trojan executable>

Troj/Merein-C changes settings for Microsoft Internet Explorer by modifying values under:

HKCU\Software\Microsoft\Internet Explorer\Security\

Registry entries are set as follows:

HKCU\Software\Microsoft\Internet Explorer\Desktop
host
<ip address>

HKCU\Software\Microsoft\Internet Explorer\Desktop
id
<random number>

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer