Welcome to the Virus Encyclopedia of Panda Security.
It connects to a server from which it downloads W32/Grum.D.drp, Spyware/AdClicker and a PHP file to send information by means of an HTTP GET request. It does not spread automatically by its own means.
|First detected on:||May 7, 2007|
|Detection updated on:||May 13, 2007|
|Yes, using TruPrevent Technologies
Downloader.OHC is a Trojan that connects to a server from which it downloads the following components:
- W32/Grum.D.drp, which has its own email server in order to send spam and infects certain executables files.
- Spyware/AdClicker, which connects to several websites in order to download malware.
- A PHP file in order to send information by means of an HTTP GET request.
Downloader.OHC does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, email messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P ) file sharing networks, etc.
Downloader.OHC is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.>