Skip to main content
Microsoft Security Intelligence
Published Nov 05, 2007 | Updated Apr 16, 2011


Detected by Microsoft Defender Antivirus

Aliases: Win32/Darksma!generic (CA) Trojan-Downloader.Win32.ConHook (Kaspersky) Downloader-AWX (McAfee) W32/ConHook (Norman) Troj/ConHook (Sophos) Downloader (Symantec) TROJ_CONHOOK (Trend Micro)


Win32/Conhook is a family of Trojans that installs themselves as Browser Helper Objects (BHOs), and connects to the Internet without user consent. They also terminate specific security services, and download additional malware to the computer.
To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products will detect and remove this threat:
For more information on antivirus software, see
Follow us