TrojanDownloader.BHO.111

Aliases:	Trojan-Downloader.Win32.BHO.bm (Kaspersky)
Date added:	2007-10-27

Details

Starts from SOFTWARE\Microsoft\Windows\CurrentVersion\Run crtfmon

Installs a fake %Program Files%\Google\googletoolbar1.dll (20kb)

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4D91-8333-CF10577473F7}

Removal

Use TrojanHunter to remove this trojan