|
Trojan.Win32.DNSChanger
''Trojan.Win32.DNSChanger'' is a Backdoor (computing), backdoor Trojan horse (computing), trojan that redirects users to various malicious websites through the means of altering the Domain Name Server, DNS settings of a victim's computer. The malware strain was first discovered by Microsoft, Microsoft Malware Protection Center on December 7, 2006 and later detected by McAfee Labs on April 19, 2009. Behaviour DNS changer trojans are dropped onto infected systems by other means of malicious software, such as Alureon, TDSS or Koobface. The trojan is a malicious .exe, Windows executable file that cannot spread towards other computers. Therefore, it performs several actions on behalf of the Adversary (cryptography), attacker within a compromised computer, such as changing the Domain Name Server, DNS settings in order to divert traffic to unsolicited, and potentially illegal and/or malicious domains. The Win32.DNSChanger trojan is used by organized crime syndicates to maintain click fr ... [...More Info...] [...Related Items...] OR: [Wikipedia] [Google] [Baidu] |
Zlob Trojan
The Zlob Trojan, identified by some antiviruses as Trojan.Zlob, is a trojan horse (computing), Trojan horse which masquerades as a required video Fake codec, codec in the form of ActiveX. It was first detected in late 2005, but only started gaining attention in mid-2006. Once installed, it displays popup ads which appear similar to real Microsoft Windows warning popups, informing the user that their computer is infected with spyware. Clicking these popups triggers the download of a rogue software, fake anti-spyware program (such as Virus Heat and MS Antivirus (malware), MS Antivirus (Antivirus 2009)) in which the Trojan horse is hidden. The Trojan has also been linked to downloading atnvrsinstall.exe which uses the Windows Security shield icon to look as if it is an anti-virus installation file from Microsoft. Having this file run can wreak havoc on computers and networks. One typical symptom is random computer shutdowns or reboots with random comments. This is caused by the pro ... [...More Info...] [...Related Items...] OR: [Wikipedia] [Google] [Baidu] |
Koobface
Koobface is a network worm that attacks Microsoft Windows, Mac OS X, and Linux platforms. This worm originally targeted users of networking websites such as Facebook, Skype, Yahoo Messenger, and email websites such as GMail, Yahoo Mail, and AOL Mail. It also targets other networking websites, such as MySpace, Twitter, and it can infect other devices on the same local network. Technical support scammers also fraudulently claim to their intended victims that they have a Koobface infection on their computer by using fake popups and using built-in Windows programs. Infection Koobface ultimately attempts, upon successful infection, to gather login information for FTP sites, Facebook, Skype, and other social media platforms, and any sensitive financial data as well.Koobface: Inside a Crimeware Network It then ... [...More Info...] [...Related Items...] OR: [Wikipedia] [Google] [Baidu] |