Sophos

Troj/Vapsup-Y

Aliases
  • Adware:Win32/Vapsup
  • W32/Adware-Vapsup!Maximus
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Included in our products from October 2008 (4.34)
Protection available since 7 September 2008 20:32:52 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Vapsup-Y is an adware related plugin for Microsoft Internet Explorer, installed by Trojans in the Troj/Zlob- family.

Troj/Vapsup-Y is a DLL which is typically installed to the Windows system folder.

The Troj/Vapsup-Y DLL is registered as a COM object and toolbar, creating registry entries under:

HKCR\CLSID\{89F51B26-A3FB-487C-B4E8-334CC35795A1}
HKCR\gksraemq.ToolBar.1
HKCR\gksraemq.bwxf
HKCR\TypeLib\{61A52CDE-9344-4E28-83D1-F94329B1C1E8}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{89F51B26-A3FB-487C-B4E8-334CC35795A1}

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer