Home / malwarePDF  

Adware:Win32/BHO.A


First posted on 15 December 2009.
Source: SecurityHome

Aliases :

Adware:Win32/BHO.A is also known as not-a-virus:AdWare.Win32.Agent.qbe (Kaspersky), TrojanSpy.Agent.PHBI (VirusBuster), Adware.Gen (Symantec).

Explanation :

Adware:Win32/BHO.A is a detection for DLL files that may be registered as BHOs (Browser Helper Objects). These files may display advertisements and/or download other components from different Web sites.
Top

Adware:Win32/BHO.A is a detection for DLL files that may be registered as BHOs (Browser Helper Objects). These files may display advertisements and/or download other components from different Web sites. InstallationAdware:Win32/BHO.A may create the following mutexes when it is installed:

  • Global\CONFIGURATOR_GLOBAL_LOCK
  • Global\CONFIGURATOR_INSTANCE_LOCK
    • Additional InformationAdware:Win32/BHO.A may download files from the following sites:
  • messangerupdate.com
  • messangerupdate.net
    • It may also monitor browser activity and display out-of-context pop-up advertisements.

    Analysis by Francis Allan Tan Seng

    Last update 15 December 2009

     

    TOP

    Malware :

    Family: