 |
|
 |
|
DizzyX
Administrator
Data inscrierii: 16/Iul/2008
Mesaje: 48
|
|
 |
|
 |
|
 Trimis: 16/07/2008 02:14 Titlul subiectului: Trojan.Zlob.CKZ |
 |
|
Trojan.Zlob.CKZ
( Trojan-Downloader.Win32.Zlob.nwr Win32/TrojanDownloader.Zlob.BYT TR/Dldr.Zlob.nwr )
Raspandire : mediu
Dauna : foarte scazut
Size: 20992
Descoperit : 2008 May 28
SYMPTOMS:
Presence of the following directories:
%ProgramFilesDir%\VirusHeat 4.4\%ProgramFilesDir%\NetProject\
TECHNICAL DESCRIPTION:
At execution the trojan access the following webpage:http://69.50.164.54/this/[removed]/stereo/music.php,using "internetsecurity" as UserAgent.Then downloads and executes the file:http://dl1.virusheat.com/downloads/[removed]/vrh_setup.exewhich installs a rogue antivirus and display fake security alerts or notifications to trick user to buy the paid version of VirusHeat
[URL=http://imageshack.us] [/URL] |
|
FAQ 
Mesaje private 
