Trojan:Win32/Goweh.D is a Trojan that alters several settings in Internet Explorer. It changes the home page and redirects search queries and traffic to other Web pages. Win32/Goweh.D is usually installed on a computer by another Trojan dropper or downloader.

Trojan:Win32/Alemod.C.dr is a Trojan dropper and data-stealing Trojan. Trojan:Win32/Alemod.C.dr infects wininet.dll; Microsoft detects the infected wininet.dll file as Win32/Nsag.B. The dropper installs Trojan:Win32/Alemod.C and Trojan:Win32/Alemod.C.dll. Together these Trojans perform operations such as capturing data from outbound user Web traffic and displaying a hyperlink and dropping shortcuts to the infected user's desktop. These shortcuts may point to spyware-related Web sites.