English
The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1

Trojan-Clicker.Win32.Small.ai

Detected Jul 19 2004 05:57 GMT
Released Jul 19 2004 05:57 GMT
Published Feb 09 2007 07:07 GMT

Technical Details
Payload
Removal instructions

Technical Details

This Trojan is designed to open a web page in Internet Explorer without the user’s knowledge. It is a Windows PE EXE file. The file is approximately 22KB in size. It is not packed in any way, and is written in Visual C++.

Payload

Once launched, the Trojan opens the following URL using the default browser:

http://www.stomcc.com/redirect.asp***

It then ceases running.


Removal instructions

If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:

  1. Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
  2. Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).

Bookmark and Share
Share
Trojan-Clicker

Programs classified as Trojan-Clicker are designed to access Internet resources (usually web pages). This is done either by sending appropriate commands to the browser or by replacing system files that provide “standard” addresses for Internet resources (such as the Windows hosts file).

A malicious user may use Trojan-Clicker programs to:

  • increase the number of visits to certain sites in order to boost the number of hits for online ads
  • conduct a DoS (Denial of Service) attack on a particular server
  • lead potential victims to viruses or Trojans.

Other versions

Aliases

Trojan-Clicker.Win32.Small.ai (Kaspersky Lab) is also known as:

  • TrojanClicker.Win32.Small.ai (Kaspersky Lab)
  • Trojan: AdClicker-AG (McAfee)
  • Troj/TCStomc-A (Sophos)
  • Trojan.StomCC.A (ClamAV)
  • Trj/Stomcc.A (Panda)
  • W32/Malware!3003 (FPROT)
  • TrojanClicker:Win32/Stocc (MS(OneCare))
  • Trojan.Stom (DrWeb)
  • Win32/TrojanClicker.Stomcc.A trojan (Nod32)
  • Trojan.Generic.2123822 (BitDef7)
  • Win32:Small-DPC [Trj] (AVAST)
  • Trojan-Downloader.Win32.Small (Ikarus)
  • Clicker.H (AVG)
  • TR/Stomcc.09 (AVIRA)
  • Trojan.Adclicker (NAV)
  • AdClicker-AG (NAI)
  • Trojan.Clicker.Small.hw (Rising)
  • Trojan-Clicker.Win32.Small.ai [AVP] (FSecure)