Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Protection available since | 13 October 2006 17:03:06 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Dloadr-AOX is a Trojan for the Windows platform.
Troj/Dloadr-AOX includes functionality to access the internet and communicate with a remote server via HTTP.
When Troj/Dloadr-AOX is installed it tries to download DLL components into the following files:
<current folder>\Update\AdPutHelper.dll
<current folder>\Update\WinServer.dll
These DLL files are detected as Troj/Dloadr-AOX.
The AdPutHelper.dll DLL file is registered as a COM object, creating registry entries under:
HKCR\AdPutHelper.AdHelper\
HKCR\CLSID\{631EDC67-F035-49BA-B8BC-983B474E9BB4}
Troj/Dloadr-AOX also creates the file <current folder>\AdPutHelper.ini.
The following registry entry is also created:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
AdHelper

