Sophos

Troj/BHO-EJ

Aliases
  • Trojan.Win32.BHO.aes
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from February 2008 (4.26)
Protection available since 14 December 2007 00:25:42 (GMT)
Detected by All Sophos products

Action

More Information

Troj/BHO-EJ is a Trojan for the Windows platform.

When Troj/BHO-EJ is installed it creates the file <Root>\xp2007.dat.

The file xp2007.dat is registered as a COM object and Browser Helper Object (BHO) for Microsoft Internet Explorer, creating registry entries under:

HKCR\CLSID\{FAD1B5E5-5D6B-4912-A314-54A650B16D39}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FAD1B5E5-5D6B-4912-A314-54A650B16D39

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer