Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Included in our products from | March 2008 (4.27) |
| Protection available since | 1 February 2008 06:15:56 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Spy-AF is a Trojan for the Windows platform.
When Troj/Spy-AF is installed it creates the file <Root>\xp2008.dat.
The file xp2008.dat is detected as Troj/BhoDro-Fam.
The file xp2008.dat is registered as a COM object and Browser Helper Object (BHO) for Microsoft Internet Explorer, creating registry entries under:
HKCR\CLSID\{9E97785C-807B-4362-AC13-03A073E7F746}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9E97785C-807B-4362-AC13-03A073E7F746
