high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 22 July 2008 22:46:40 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/BHO-GF is registered as a COM object and Browser Helper Object (BHO) for Microsoft Internet Explorer, creating registry entries under:
HKCR\CLSID\{ba6fd309-5936-8a4d-c47e-0b1874472763}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ba6fd309-5936-8a4d-c47e-0b1874472763}
The following registry entry is created to run code exported by the Trojan DLL on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
{d136286e-bb98-a38b-4b6b-5433c152de92}
<System>\Rundll32.exe "<pathname of the Trojan DLL>" DllStart
|
