Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/BesTof-C is a Trojan for the Windows platform.
The Trojan may display a message randomly chosen from the following:
Microsoft Windows Security Warning
Your system files can be corrupted by some outer virus invasion.
All the information can be lost. You should be able to restore your system defaults.
Protect your system by virus scan!
Quick search detected that you are not virus protected.
The further analysis can be very helpful to test your system virus resistance.
You should take measures to cover the main system files with virus protection and obtain newer version of antivirus protection software.
Show the list of the most compatible to your system antivirus system!
Warning! Unknown virus detected!
Your hard disk information can be erased.
Backup your vital information and scan for viruses.
Click OK for getting the latest antivirus protectors!
Attention! New kind of virus has been detected.
To locate it or find if your computer is virus isolated search for the new antivirus updates.
You should setup the latest updates immediately!
Spyware technologies has been detected!
Your information is not secure now. You should hide it from the spy software's invasions.
This will take a few moments to build antispyware protection.
Click OK and choice the best antivirus offers!
Troj/BesTof-C is a Trojan for the Windows platform.
The Trojan may display a message randomly chosen from the following:
Microsoft Windows Security Warning
Your system files can be corrupted by some outer virus invasion.
All the information can be lost. You should be able to restore your system defaults.
Protect your system by virus scan!
Quick search detected that you are not virus protected.
The further analysis can be very helpful to test your system virus resistance.
You should take measures to cover the main system files with virus protection and obtain newer version of antivirus protection software.
Show the list of the most compatible to your system antivirus system!
Warning! Unknown virus detected!
Your hard disk information can be erased.
Backup your vital information and scan for viruses.
Click OK for getting the latest antivirus protectors!
Attention! New kind of virus has been detected.
To locate it or find if your computer is virus isolated search for the new antivirus updates.
You should setup the latest updates immediately!
Spyware technologies has been detected!
Your information is not secure now. You should hide it from the spy software's invasions.
This will take a few moments to build antispyware protection.
Click OK and choice the best antivirus offers!
When Troj/BesTof-C is installed the following files are created:
<Desktop>\Blowjob.lnk
<Desktop>\Car Insurance.lnk
<Desktop>\Cigarettes Discount.lnk
<Desktop>\Credit Card.lnk
<Desktop>\Forex Trading.lnk
<Desktop>\Free Ringtones.lnk
<Desktop>\Gift Ideas.lnk
<Desktop>\Group Sex.lnk
<Desktop>\Home Loan.lnk
<Desktop>\Mp3 Download.lnk
<Desktop>\Online Casino.lnk
<Desktop>\Online Dating.lnk
<Desktop>\Phentermine.lnk
<Desktop>\Play Poker.lnk
<Desktop>\PopUp Blocker.lnk
<Desktop>\Porn Dvd.lnk
<Desktop>\Real Estate.lnk
<Desktop>\Sport Betting.lnk
<Desktop>\Spyware Remover.lnk
<Desktop>\Texas Holdem.lnk
<Desktop>\Viagra.lnk
<User>\Start Menu\PopUp Blocker.lnk
<User>\Start Menu\Spyware Remover.lnk
The following registry entry is set:
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
CLSID
(B75F75B8-93F3-429D-FF34-660B206D897A)
Registry entries are created under:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Best Search Engine!!!\
Troj/BesTof-C provides an uninstall option which can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as "Best Search Engine!!!".
