We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
TrojanDownloader:Win32/QQHelper.gen!E
Detected by Microsoft Defender Antivirus
Aliases: BackDoor-CVM.dll (McAfee) TROJ_AGENT.SFD (Trend Micro) Trojan-Downloader.Win32.QQHelper.vd (Kaspersky) Trojan.Downloader.QQHelper.NAT (BitDefender)
Summary
TrojanDownloader:Win32/QQHelper.gen!E is a generic detection for a trojan that usually arrives in a system bundled with other malware, such as TrojanDropper:Win32/Stardrop.A. It is capable of changing the Home Page of Internet Explorer, and adding a typed URL link in the drop-down list of URLs, also in IE.
Manual removal is not recommended for this threat. Use Microsoft Security Essentials or another up-to-date scanning and removal tool to detect and remove this threat and other unwanted software from your computer. For more information on Microsoft security products, see http://www.microsoft.com/protect/products/computer/default.mspx.
This threat may make lasting changes to an affected system’s configuration that will NOT be restored by detecting and removing this threat. For more information on returning an affected system to its pre-infected state, please see the following article/s:
-
Changing your Internet Explorer Home Page:
-
For Internet Explorer 7: http://windowshelp.microsoft.com/
-
For Internet Explorer 6: http://support.microsoft.com/kb/252464
-
Clearing the Typed URLs list: http://www.microsoft.com/technet/scriptcenter/resources/qanda/may06/hey0509.mspx