Threat Search: 

ThreatExpert's Statistics for Mal/BHO-S [Sophos]:

Mal/BHO-S [Sophos] is also known as:
Threat AliasNumber of Incidents
Win-Trojan/Onestep.577536 [AhnLab]3
Adware-BHO.gen.g [McAfee]2
Trojan.OneStep [Ikarus]2
Adware:Win32/Wyyo [Microsoft]1
Adware-BHO.gen.m [McAfee]1
Gen.Trojan [Ikarus]1
not-a-virus:AdWare.Win32.Zwangi.by [Kaspersky Lab]1
Trojan.Win32.Inject.aagc [Kaspersky Lab]1
Win-Trojan/Agent.577536.R [AhnLab]1

Mal/BHO-S [Sophos] is known to be created as:
%ProgramFiles%\kwinzy\kwinzy.dll
%ProgramFiles%\seekservice\seekservice.dll
%ProgramFiles%\zwangi\zwangi.dll
%Temp%\seekapp.dll
%Temp%\seekapp\seekapp1.dll
%Temp%\seekapp\seekapp2.dll
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).