 |
|
 |
|
DizzyX
Administrator
Data inscrierii: 16/Iul/2008
Mesaje: 48
|
|
 |
|
 |
|
 Trimis: 16/07/2008 02:11 Titlul subiectului: Trojan.LowZones.SG |
 |
|
Trojan.LowZones.SG
( Trojan.PrivacySet )
Raspandire : mediu
Dauna : mediu
Size: aprox 25 kb
Descoperit : 2008 May 30
SYMPTOMS:
The trojan is a security threat for system when using Internet Explorer 6 or another further version.
The user can notice changes the browsers properties ( Internet Explorer -> Tools -> Privacy ). The malware alters the settings for Privacy that are noticeable from the slider and sets it to "Accept all cookies".
[URL=http://imageshack.us] [/URL]
TECHNICAL DESCRIPTION:
The trojan acts as a security menace that makes the system unsafer for surfing the Internet.
It has the folowing behavior :
First it makes a check for the targeted security settings using PrivacyGetZonePreferenceW function . This will access values of the registries contained by this registry key : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\{AEBA21FA-782A-4A90-978D-B72164C80120}
Afterward it changes it , if not the lowered values are already set, into the same registry key mentioned earlier with the function PrivacySetZonePreferenceW altering a value PRIVACY_TEMPLATE_LOW (with the numeric value of 5) and creates this registry key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\PrivacyAdvanced containing 0x0 . This is the same as Accept All Cookies on the Privacy Preferences slider bar in Internet Options.
The trojan lowers security that other malware ("malicious software") can launch cookies in the system browser thus increasing the chance of indentity theft or browsing tracking. |
|
FAQ 
Mesaje private 
