W32/Bho.KA Trojan

 Virus Information - W32/Bho.KA Trojan:

W32/Bho.KA is a trojan. The trojan will infect Windows systems.

The trojan will arrive as a dropped file of another malware or may be downloaded from the Internet.

Upon execution, the trojan drops Microsoft.dll and Microsoft.exe file in the Root folder.

It modifies the registry at the following location to ensure its automatic execution at every system startup:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A72414B2-0ED7-4F61-95B4-9CCEFC8A9A7C}

It then tries to connect to the following url to download malicious file.

http://{BLOCKED}.27.51/wpad.dat