Malware authors have discovered a shortcut to create a Trojan horse program using components from an anti-phishing product from China-based Zhuhai Kingsoft Software. The Trojan uses the WebShield product s ability to lock the browser home page to a specific domain and redirect text format URLs. The malware authors replace the KingSoft version of that file with their own list of domains. Another file, spritesp.dat, contains a list of popular Chinese Web sites. Attempts to access those domains will ge redirected by the Trojan.
Source: https://threatpost.com/malware-piggybacks-anti-phishing-software-030411/74995/