Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | May 2008 (4.29) |
| Protection available since | 6 April 2008 04:40:17 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/VBSpy-H is a Trojan for the Windows platform.
Troj/VBSpy-H includes functionality to access the internet and communicate with a remote server via HTTP.
When run Troj/VBSpy-H opens links to pornographic websites without warning.
Troj/VBSpy-H may alter the following registry entries:
<Windows>\Current Version\Explorer\UserAssist\
{75048700-EF1F-11D0-9888-006097DEACF9}
HKCU\Software\05\path
<System>\Restore
Troj/VBSpy-H may copy itself to the following locations
<System>\dhcp\
<System>\restore\
( Troj/VBSpy-H will also create a batch file at the same locations. The batch file will have the same name as Troj/VBSpy-H. )
