TROJ_BHO.SK

This Trojan may be installed manually by a user. It may be installed manually by a user. It may be downloaded unknowingly by a user when visiting malicious Web sites.

It drops files/components. Trend Micro detects the dropped files as TROJ_SMALL.GAG, TROJ_ZLOB.EDZ, and TROJ_VAPSUP.GN. It then executes the dropped file(s). As a result, routines of the dropped Trojans are also exhibited on the affected system.

It creates registry entries to enable its automatic execution at every system startup. It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating registry keys/entries. It creates registry key(s)/entry(ies) as part of its installation routine.

Related Items