Tuesday, October 14, 2008

Other Downloader

Removing Other
Categories: Downloader,Hacker Tool
This family of Trojans downloads and installs new malware or adware on the computer. The downloader then either launches the new malware or registers it to enable autorun according to the local operating system requirements.

The names and locations of malware to be downloaded are either coded into the Trojan or downloaded from a specified website.
These utilities are designed to penetrate remote computers in order to use them as zombies (by using backdoors) or to download other malicious programs to computer.

Exploits use vulnerabilities in operating systems and applications to achieve the same result.

Other Also known as:

[Kaspersky]HackTool.Win32.IpcScan.160;
[Panda]Application/Serv-U-Based.A,HackTool/IPCScan.B

Visible Symptoms:
Files in system folders:
[%DESKTOP%]\free screensavers.lnk
[%DESKTOP%]\old port casino.lnk
[%WINDOWS%]\zahov.exe
[%DESKTOP%]\free screensavers.lnk
[%DESKTOP%]\old port casino.lnk
[%WINDOWS%]\zahov.exe

How to detect Other:

Files:
[%DESKTOP%]\free screensavers.lnk
[%DESKTOP%]\old port casino.lnk
[%WINDOWS%]\zahov.exe
[%DESKTOP%]\free screensavers.lnk
[%DESKTOP%]\old port casino.lnk
[%WINDOWS%]\zahov.exe

Registry Keys:
HKEY_CLASSES_ROOT\favorite.favoriteman
HKEY_CLASSES_ROOT\favorite.favoriteman.1
HKEY_CLASSES_ROOT\bho42602.clsdockwindow
HKEY_CLASSES_ROOT\bho426022
HKEY_CLASSES_ROOT\clsid\{4cf5275b-cdbc-11d3-a8af-0090279a5978}
HKEY_CLASSES_ROOT\interface\{072d14ef-99b6-49dd-9be5-76142727b7ac}
HKEY_CURRENT_USER\software\inetcash
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\inetbar v1.1 r2_is1

Registry Values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing Other:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
ZSearch BHO Removal
Small.B Trojan Symptoms
Remove DlToon Trojan
Zlob.Fam.Internet Explorer Secure Plug-in Trojan Removal instruction
Essgol Trojan Cleaner

No comments: