Internet threat level: 1
Home→Descriptions→Trojan-Clicker.Win32.Small.bh
Trojan-Clicker.Win32.Small.bh
| Detected | Nov 08 2004 09:51 GMT |
| Released | Nov 08 2004 09:51 GMT |
| Published | Feb 15 2007 11:47 GMT |
Payload
Removal instructions
Technical Details
This Trojan opens a range of Internet sites without the knowledge or consent of the user. It is a Windows PE EXE file. The file is approximately 5KB in size.Payload
Once launched, the Trojan will open the following URLs every 30 seconds:
http://www.dataforcecg.com/*****sion/zin.php?24759
http://www.****stretch.ru/zin.php?24759
http://***mag.net/zin.php?24759
http://courie.ru/*****/zin.php?24759
http://mucuc.h10.ru/*****/zin.php?24759
http://www.gran****.ru/zin.php?24759
http://mir*****.ru/zin.php?24759
http://****sproduction.com/zin.php?24759
Removal instructions
If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:
- Use Task Manager to terminate the Trojan process.
- Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
- Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).
Programs classified as Trojan-Clicker are designed to access Internet resources (usually web pages). This is done either by sending appropriate commands to the browser or by replacing system files that provide “standard” addresses for Internet resources (such as the Windows hosts file).
A malicious user may use Trojan-Clicker programs to:
- increase the number of visits to certain sites in order to boost the number of hits for online ads
- conduct a DoS (Denial of Service) attack on a particular server
- lead potential victims to viruses or Trojans.
Trojan-Clicker.
- Trojan:
Downloader-EX (McAfee) - Mal/Generic-L (Sophos)
- Heuristic.
WinPE-Statistical (Panda) - W32/Downloader-Web-based!Maximus (FPROT)
- TrojanDownloader:
Win32/Troxen!rts (MS(OneCare)) - Trojan.
Hino (DrWeb) - a variant of Win32/TrojanClicker.
Small trojan (Nod32) - Generic.
Malware. dld!!gZ. 31C1F158 (BitDef7) - Trojan.
CL. Small. DBMU (VirusBuster) - TR/Downloader.
Gen (AVIRA) - Downloader (NAV)
- W32/Smalltroj.
XGRV (Norman) - Trojan-Clicker.
Win32. Small. bh [AVP] (FSecure) - TROJ_Gen.
BX07F7 (TrendMicro) - Trojan.
Win32. Generic!BT (Sunbelt) - Trojan.
CL. Small. DBMU (VirusBusterBeta)
© 1997-2012 Kaspersky Lab ZAO. All Rights Reserved.
Industry-leading Antivirus Software.
Registered trademarks and service marks are the property of their respective owners.