Malware type: Trojan

Aliases: Adware-CWS (McAfee), Trojan.Linst (Symantec), BDS/Sivuxa.A.2 (Avira),

In the wild: No

Destructive: No

Language: English

Platform: Windows 95, 98, ME, NT, 2000, XP

Encrypted: No

Description: 

This Trojan malware usually arrives with the file name CIHOST.EXE. Upon execution, it drops a copy of itself along with the following files in the Windows, system, and current directories:

• CIHOST.EXE
• ZLIB.DLL
• GROUPS.TXT
• LINKS.TXT
• HTPREQ.DLL
• DLINSTH.DLL
• DLINST0.DLL
• BHO.DLL

This malware also loads its component, DLINSTH.DLL, which connects to a particular Web site where it can access scripts and send system information. This Trojan installs an Adware, BHO.DLL, which Trend Micro detects as ADW_IEHELPER.A.

This Trojan runs on Windows 95, 98, ME, NT, 2000, and XP.

For additional information about this threat, see:
Solution
Technical Details

Description created: Apr. 23, 2004 8:10:38 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.