Sophos

Sophos blogs

Troj/BAds-A

Aliases
  • Trojan-Downloader.Win32.Adload.bp
  • Trojan-Downloader.Win32.Agent.aah
  • W32/Downldr2.JSL
  • W32/DL_small.BOZ
  • TrojanDownloader:Win32/Adload
  • Adware.DollarRevenue
  • Trackware.Alexa
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
  • Monitors browser activity
Protection available since 19 July 2008 01:07:09 (GMT)
Detected by All Sophos products
Download Free virus scan
Download the Threat Detection Test
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/BAds-A is a Trojan for the Windows Platform

Troj/BAds-A has the functionality to communicate with a remote server via HTTP to report users browsing details and to download and install additional code.

Troj/BAds-A may create the following files:
<User>\Local Settings\Temp\AdsNT.exe
<Windows>\AdsNT.exe
<Windows>\AdsNT.ini

Troj/BAds-A may alter the following registry entries:
<Software>\Microsoft\Internet Connection Wizard\ShellNext
<Software>\Alexa Toolbar
<Software>\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer