Sophos

G O Trade S R O

Category
Type
What to do
  • If you've received an alert for a blocked PUA or adware and decide that the application is not suitable for your workplace, then follow the instructions for removing PUAs.

Summary

 
Affected operating systems Windows
Characteristics
  • Monitors browser activity
  • Opens links to websites
Included in our products from September 2008 (4.33)
Protection available since 24 July 2008 23:38:39 (GMT)
Detected by Sophos Anti-Virus for Windows, version 7, and PureMessage for Microsoft Exchange.

More Information

G O Trade S R O is spyware with adware like functionality for the Windows platform.

Unlike most spyware/adware, G O Trade S R O informs the user in the license agreement as to what this software is capable of. Also, unlike most spyware/adware, the uninstall functionality actually works!

When run for the first time, G O Trade S R O creates the following files.
<Profile>\Application Data\Mozilla\Firefox\Profiles\<default account>\user.js
<Profile>\Application Data\proxy.pac
<Program Files>\<Filename>\license.txt
<Program Files>\<Filename>\lisys.exe
<Program Files>\<Filename>\peppi.exe
<Windows>\System\host.exe

When installed, G O Trade S R O alters the following registry entries:
<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL
<Profile>\Application Data\proxy.pac

<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run
vhost
<Windows>\System\host.exe


RSS|Atom
Get reports about the latest adware and potentially unwanted applications (PUAs) delivered to your computer