Sophos

Troj/Spy-AF

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Included in our products from March 2008 (4.27)
Protection available since 1 February 2008 06:15:56 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Spy-AF is a Trojan for the Windows platform.

When Troj/Spy-AF is installed it creates the file <Root>\xp2008.dat.

The file xp2008.dat is detected as Troj/BhoDro-Fam.

The file xp2008.dat is registered as a COM object and Browser Helper Object (BHO) for Microsoft Internet Explorer, creating registry entries under:

HKCR\CLSID\{9E97785C-807B-4362-AC13-03A073E7F746}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9E97785C-807B-4362-AC13-03A073E7F746

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer