Discovered: August 6, 2003
Updated: February 13, 2007 12:04:49 PM
Also Known As: Trojan.Stealther, Win32.Stealther [Computer Asso, Trojan.Win32.Stealther [Kasper, Stealther [McAfee], Troj/Stealth-E [Sophos], TROJ_STEALTHER.A [Trend Micro]
Type: Trojan Horse
Systems Affected: Windows 2000, Windows NT, Windows XP
Trojan.Stealther.B is a Trojan Horse that attempts to hide processes, files and registry keys/values which include CSRS*.* on Windows NT/2000/XP.
Symantec Security Response has developed a removal
tool to clean infections of
Backdoor.Winshell.50 and Trojan.Stealther.B.
NOTE: Virus definitions dated August 6, 2003 or earlier may detect this as Trojan.Stealther.
Protection
-
Initial Rapid Release version August 7, 2003
-
Latest Rapid Release version July 19, 2008 revision 019
-
Initial Daily Certified version August 7, 2003
-
Latest Daily Certified version July 19, 2008 revision 018
-
Initial Weekly Certified release date August 13, 2003
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
-
Wild Level: Low
-
Number of Infections: 0 - 49
-
Number of Sites: 0 - 2
-
Geographical Distribution: Low
-
Threat Containment: Easy
-
Removal: Moderate
Damage
Distribution
Writeup By: Kaoru Hayashi
