Spyware Remover Help » trojan

CDC H1N1 Malspam Campaign

Ted — Thu, 03 Dec 2009 19:00:02 +0000

Our spam traps have been receiving thousands of malspam e-mails related to a new Sinowal (zbot) campaign over the past 24 hours. The e-mail attempts to trick users into creating a profile for H1N1 (Swine Flu) vaccination at the Centers for Disease Control website. The email reads: You have received this e-mail because of the launching of State Vaccination H1N1 Program. You need to create your personal H1N1 (swine flu) Vaccination Profile on the cdc.gov website. The Vaccination is not obligatory, but every person that has reached the age of 18 has to have his personal Vaccination Profile on the cdc.gov site. This profile has to be created both for the vaccinated people and the not-vaccinated ones. This profile is used for the registering system of vaccinated and not-vaccinated people. Create your Personal H1N1 Vaccination Profile using the link: create personal profile—-Centers for Disease Control and Prevention (CDC) – 1600 Clifton Rd – Atlanta GA 30333 – 800-CDC-INFO (800-232-4636) The (several) websites used in this malspam campaign all start with online.cdc.gov.(malicious domain) and could easily convince the most suspicious users of its validity. The site reads: "Your Personal H1N1 Vaccinating Profile is an electronic document, which contains your name, your contact details and your medical data (what kind of illnesses you have sustained in your childhood or what kind of allergy you have to some certain drug). All instructions you need are included in the archive below:Your Temporary ID (valid for 48 hours) H1N1-1574377270H1N1 Vaccination Profile – Download Archive (130Kb)"The campaign uses 6 different subject lines for its e-mails. The most common subject lines are Governmental registration program and Creation of personal Vaccination Profile. Infection information: Sinowal.WRN creates a copy of itself with the name SDRA64.EXE, in the Windows system directory.Additionally, it creates the following files, where it stores the information it has obtained:LOCAL.DS and USER.DS, in the folder lowsec, created by itself, in the Windows system directory.8.TMP and 9.TMP, in the folder Temp of the Windows directory. Sinowal.WRN modifies the following entry from the Windows Registry:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runwindowsl1vi = %sysdir%\%random file%.exewhere %sysdir% is the Windows system directory and %random file% is the filename with which the Trojan is copied.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WinlogonUserinit = %sysdir%\userinit.exe,where %sysdir% is the Windows system directory.It changes this entry to:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WinlogonUserinit = %sysdir%\userinit.exe,%sysdir%\sdra64.exe,By modifying this entry, Sinowal.WRN ensures that it is run whenever Windows is startedCountry of malware origin: Ukraine
source

Mac OS X targeted by Trojan and backdoor tool (ZDNet)

Ted — Sun, 29 Nov 2009 19:35:06 +0000

Two new pieces of malware affecting Mac OS X appeared this week, a Trojan horse and a hacker tool for creating backdoors. Two pieces of malicious software affecting Apple’s Mac OS X appeared this week: a Trojan horse with the ability to download and install malicious code of an…
source

China tries out a Trojan horse (The Malaysian Insider)

Ted — Sun, 29 Nov 2009 19:35:04 +0000

BEIJING, June 27 – In May, China told computer manufacturers that all personal computers sold in the country after July 1 must come installed with an anti-pornography software. While the Chinese government insists that the purpose of the Green Dam program was to block access to porn websites, critics say that the real purpose of what they consider to be “spyware” is to block websites that the …
source

Mac OS X targeted by Trojan and backdoor tool (ZDNet UK)

Ted — Sat, 28 Nov 2009 19:35:06 +0000

Two new pieces of malware affecting OS X appeared this week, a Trojan horse and a hacker tool for creating backdoors
source

First Look: Microsoft Security Essentials (CIO)

Ted — Wed, 25 Nov 2009 19:35:03 +0000

The beta version of Microsoft Security Essentials, a free program that fights viruses and spyware, is now available for download. The app, previously code-named Morro, replaces Windows Live OneCare and fights the usual rogues’ gallery of PC threats, including worms, Trojans, and other troublemakers.
source

A closer look at MacScan 2.6.1 (Net Security)

Ted — Mon, 23 Nov 2009 19:35:03 +0000

MacScan detects, isolates, and removes spyware applications such as keystroke loggers and trojan horses. Blacklisted cookie scanner removes tracking cookies without saved usernames or passwords. MacSc…
source

First Look: Microsoft Security Essentials (PC World via Yahoo! News)

Ted — Fri, 20 Nov 2009 19:35:03 +0000

Microsoft to offer free anti-virus software (The Manila Times)

Ted — Thu, 19 Nov 2009 19:35:05 +0000

Microsoft has announced plans to offer free anti-virus software to PC users starting next year. The Redmond, Washington-based software giant said the software, code-named “Morro,” will “provide comprehensive protection from malware including viruses, spyware, rootkits and trojans.”
source

Microsoft intros beta antivirus tool (MacNN)

Ted — Wed, 18 Nov 2009 19:35:04 +0000

Microsoft on Tuesday officially launched the Security Essentials beta protection software for viruses and spyware that includes Trojans, worms and other malicious software. Previously known by the Morro codename, the software is available to download now and carries no associated costs or subscription fees with it. Microsoft also stresses the software’s ease of use, with automatic upgrades and a …
source

Free Microsoft Security Software Due Out Next Week (Data Storage Today)

Ted — Mon, 16 Nov 2009 19:35:05 +0000

Microsoft’s free software to battle malware will be released Tuesday through its Web site, the company has confirmed. Called Microsoft Security Essentials, it consists of the anti-malware components of Windows Live OneCare, for which there has been an annual charge of $49.95. Security Essentials helps protect a PC against viruses, spyware, Trojans, rootkits and other harmful software. The free …
source