Mal/BHO-J Description

Mal/BHO-J is a malicious program that registers itself as a Browser Helper Object in order to avoid detection. Once inside a system, Mal/BHO-J may communicate with a remote server and install additional malware onto a compromised computer. Mal/BHO-J can be detected and removed with a reliable security application.

Type: Malware

How Can You Detect Mal/BHO-J?

Mal/BHO-J Technical Report

As new Mal/BHO-J details are reported by our customers and findings from our Threat Research Center, we will update this section.

Mal/BHO-J’s Country of Origin:

• Republic Of Korea

Mal/BHO-J creates the following registry entries:

• [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\[filename of the sample #1 without extension].unoqun1\Clsid]
• [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{19AAAA41-136A-44F0-880A-0936F56DC2DD}\ProgID]
• [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\[filename of the sample #1 without extension].unoqun1]
• [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{19AAAA41-136A-44F0-880A-0936F56DC2DD}\InprocServer32]
• [HKEY_LOCAL_MACHINE\SOFTWARE\[filename of the sample #1 without extension]\ex\chktime\set\2009111223]
• [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{19AAAA41-136A-44F0-880A-0936F56DC2DD}]

Important Article Disclaimer