high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 9 August 2007 14:53:40 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/BHO-DC is a Trojan for the Windows platform.
Troj/BHO-DC includes functionality to access the internet and communicate with a remote server via HTTP.
When Troj/BHO-DC is installed the following files are created:
<Temporary Internet Files>\Content.IE5\od6fwfox\bc1[1].htm
<Program Files>\Google\googletoolbar1.dll
The file googletoolbar1.dll is detected as Mal/Behav-004.
The following registry entry is created to run Troj/BHO-DC on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
crtfmon
<pathname of the Trojan executable>
The file googletoolbar1.dll is registered as a COM object and Browser Helper Object (BHO) for Microsoft Internet Explorer, creating registry entries under:
HKCR\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}
HKCR\Interface\{DA4DEAB2-9BAE-41DE-83EA-0916180F8AE4}
HKCR\TypeLib\{ED894DB9-2DC6-4CA5-8FDF-86763C582564}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2318C2B1-4965-11d4-9B18-009027A5CD4F}
Registry entries are set as follows:
HKCR\Googletoolbar.Google.1\CLSID
(default)
{2318C2B1-4965-11d4-9B18-009027A5CD4F}
HKCR\Googletoolbar.Google\CLSID
(default)
{2318C2B1-4965-11d4-9B18-009027A5CD4F}
Registry entries are created under:
HKCR\Googletoolbar.Google
|
