Sophos

Troj/VBSpy-H

Aliases
  • AdClicker-EG
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
  • Opens links to websites
Included in our products from May 2008 (4.29)
Protection available since 6 April 2008 04:40:17 (GMT)
Detected by All Sophos products

Action

More Information

Troj/VBSpy-H is a Trojan for the Windows platform.

Troj/VBSpy-H includes functionality to access the internet and communicate with a remote server via HTTP.

When run Troj/VBSpy-H opens links to pornographic websites without warning.

Troj/VBSpy-H may alter the following registry entries:
<Windows>\Current Version\Explorer\UserAssist\
{75048700-EF1F-11D0-9888-006097DEACF9}

HKCU\Software\05\path
<System>\Restore


Troj/VBSpy-H may copy itself to the following locations
<System>\dhcp\
<System>\restore\
( Troj/VBSpy-H will also create a batch file at the same locations. The batch file will have the same name as Troj/VBSpy-H. )




RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer