tedster - 8:34 pm on Dec 6, 2008 (gmt 0)

{9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e}

cheeaun(at)phoenity.com

I've got three with that second format - including YSlow which depends on Firebug. Makes me wonder if the naming difference is about dependent add-ons.

From that new link to BitDefender:

It drops an executable file (which is a Firefox 3 plugin) and a JavaScript file (detected by Bitdefender as: Trojan.PWS.ChromeInject.A) into the Firefox plugins and chrome folders respectively.

Lots of other footprints mentioned as well for the trojan. That's a lot more helpful, even with three different names.

(reminds me of "reload vs. refresh", "internet shortcuts" and all the
other alternative jargon that was created during the first browser wars.)