The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1


Detected Aug 14 2007 14:40 GMT
Released Aug 14 2007 14:40 GMT
Published Sep 09 2011 08:53 GMT

Technical Details
Removal instructions

Technical Details

A trojan program. It is a Windows application (PE-EXE file). 74240 bytes. Written in Delphi.


When launching, the trojan reloads the operating system and shuts down.

Removal instructions

If your computer has not been protected with anti-virus software and has been infected with malware, you will need to take the following actions to delete this:

  1. Delete the original program file (its location on the infected computer will depend on how the program got onto the computer).
  2. Run a full Kaspersky Antivirus scan of the computer with updated antivirus databases (download trial version).

Bookmark and Share

This type of behaviour covers malicious programs that delete, block, modify, or copy data, disrupt computer or network performance, but which cannot be classified under any of the behaviours identified above.

This classification also covers “multipurpose” Trojan programs, i.e. those that are capable of conducting several actions at once and which demonstrate several Trojan behaviours in a single program. This means they cannot be indisputably classified as having any single behaviour.


Trojan.Win32.Reboot.h (Kaspersky Lab) is also known as:

  • Trojan: Generic.dx!hql (McAfee)
  • Mal/Generic-L (Sophos)
  • W32/Trojan2.BYE (FPROT)
  • Trojan:Win32/Orsam!rts (MS(OneCare))
  • Trojan.Reboot.40986 (DrWeb)
  • Trojan.Generic.4003613 (BitDef7)
  • Trojan.Reboot!wbVkP30qqP0 (VirusBuster)
  • Trojan.Win32.Reboot (Ikarus)
  • W32/Suspicious_Gen2.AHOE (Norman)
  • Trojan.Win32.Reboot.h (Rising)
  • Trojan.Win32.Reboot.h [AVP] (FSecure)
  • TROJ_Gen.XC52U4 (TrendMicro)
  • Trojan.Win32.Generic!BT (Sunbelt)
  • Trojan.Reboot!wbVkP30qqP0 (VirusBusterBeta)