Troj/Ambler-F

Category: Viruses and Spyware Protection available since:24 Oct 2008 14:11:37 (GMT)
Type: Trojan Last Updated:24 Oct 2008 14:11:37 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Ambler-F is a Trojan for the Windows platform.

When Troj/Ambler-F is installed the following files are created:

<System>\gcomd32.dll (also detected as Troj/Ambler-F)
<System>\lm.dat (can be deleted)

The file gcomd32.dll is registered as a COM object and Browser Helper Object (BHO) for Microsoft Internet Explorer, creating registry entries under:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF99D588-3D5F-4194-828A-E03870A57A77}
HKCR\CLSID\{EF99D588-3D5F-4194-828A-E03870A57A77}

The following registry entry is set:

HKCU\Software\Microsoft\Internet Explorer\Main
Enable Browser Extensions
yes

download Try Sophos products for free
Download now