Overall risk rating:

Reported detections:

System  impact:

Information exposure:

Description:

This spyware uses social engineering methods to lure users into performing certain actions that may, directly or indirectly, cause malicious routines to be performed. Specifically, it monitors browsing activities, particularly Google searches, and sends the information to a predefined website.

To get a one-glance comprehensive view of the behavior of this spyware, refer to the Threat Diagram shown below.

Spyware Overview

This spyware may be downloaded from remote sites by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.

Upon execution, it creates a Firefox Plugin named Adobe Flash Player 0.2. It monitors browsing activities, particularly Google searches, and sends the information. This plugin may also inject advertisements into the Google search result pages.

This spyware creates a folder and drops component files, some of which are detected as JS_EBOD.A.

For additional information about this threat, see:
Solution
Technical Details

Description created: Aug 28, 2009