Categories: Adware,BHO,Worm
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits
BHO (Browser Helper Object) Trojan.
The BHO waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
The method of network transport used by the attacker makes this Trojan unique.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.
Instead, this Trojan encodes the data with a simple XOR algorithm before placing it into
the data section of an ICMP ping packet." explained the company.
Worms can be classified according to the propagation method they use,
i.e. how they deliver copies of themselves to new victim machines.
Worms can also be classified by installation method, launch method and finally according
to characteristics standard to all malware: polymorphism, stealth etc.
Many of the worms which managed to cause significant outbreaks use more then
one propagation method as well as more than one infection technique.
The methods are listed separately below.
[Panda]Adware/WurldMedia
Visible Symptoms:
Files in system folders:
[%SYSTEM%]\beegd10.ocx
[%SYSTEM%]\clsncx22.dll
[%SYSTEM%]\clsnol22.dll
[%SYSTEM%]\fkhjqhsj.dll
[%SYSTEM%]\mobho.dll
[%SYSTEM%]\mos.exe
[%SYSTEM%]\s4setp.exe
[%SYSTEM%]\beegd10.ocx
[%SYSTEM%]\clsncx22.dll
[%SYSTEM%]\clsnol22.dll
[%SYSTEM%]\fkhjqhsj.dll
[%SYSTEM%]\mobho.dll
[%SYSTEM%]\mos.exe
[%SYSTEM%]\s4setp.exe
How to detect Morpheus:
Files:
[%SYSTEM%]\beegd10.ocx
[%SYSTEM%]\clsncx22.dll
[%SYSTEM%]\clsnol22.dll
[%SYSTEM%]\fkhjqhsj.dll
[%SYSTEM%]\mobho.dll
[%SYSTEM%]\mos.exe
[%SYSTEM%]\s4setp.exe
[%SYSTEM%]\beegd10.ocx
[%SYSTEM%]\clsncx22.dll
[%SYSTEM%]\clsnol22.dll
[%SYSTEM%]\fkhjqhsj.dll
[%SYSTEM%]\mobho.dll
[%SYSTEM%]\mos.exe
[%SYSTEM%]\s4setp.exe
Registry Values:
HKEY_LOCAL_MACHINE\software\morpheus\mediamanager
HKEY_LOCAL_MACHINE\software\morpheus\mediamanager
HKEY_LOCAL_MACHINE\software\morpheus\mediamanager
HKEY_LOCAL_MACHINE\software\morpheus\mediamanager
HKEY_LOCAL_MACHINE\software\morpheus\mediamanager
HKEY_LOCAL_MACHINE\software\morpheus\mediamanager
HKEY_LOCAL_MACHINE\software\morpheus\mediamanager
HKEY_LOCAL_MACHINE\software\morpheus\mediamanager
Removing Morpheus:
You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.
Or buy it to remove ALL viruses from your computer.Also Be Aware of the Following Threats:
Kenny Backdoor Removal instruction
Win32.Flooder.MailSpam.VB.virus DoS Removal
SillyDL.4PW Trojan Cleaner
Pigeon.ACZ Trojan Cleaner
No comments:
Post a Comment