Saturday, January 24, 2009

Morpheus Adware

Removing Morpheus
Categories: Adware,BHO,Worm
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer,
including information related to Internet browser usage or other computer habits
BHO (Browser Helper Object) Trojan.
The BHO waits for the user to post personal information to a monitored website.
As this information is entered by the user, it is captured by the BHO and sent back to the attacker.
The method of network transport used by the attacker makes this Trojan unique.
Typically, keyloggers of this type will send the stolen information back to the attacker via email
or HTTP POST, which can appear suspicious.
Instead, this Trojan encodes the data with a simple XOR algorithm before placing it into
the data section of an ICMP ping packet." explained the company.
Worms can be classified according to the propagation method they use,
i.e. how they deliver copies of themselves to new victim machines.
Worms can also be classified by installation method, launch method and finally according
to characteristics standard to all malware: polymorphism, stealth etc.

Many of the worms which managed to cause significant outbreaks use more then
one propagation method as well as more than one infection technique.
The methods are listed separately below.

Morpheus Also known as:

[Panda]Adware/WurldMedia

Visible Symptoms:
Files in system folders:
[%SYSTEM%]\beegd10.ocx
[%SYSTEM%]\clsncx22.dll
[%SYSTEM%]\clsnol22.dll
[%SYSTEM%]\fkhjqhsj.dll
[%SYSTEM%]\mobho.dll
[%SYSTEM%]\mos.exe
[%SYSTEM%]\s4setp.exe
[%SYSTEM%]\beegd10.ocx
[%SYSTEM%]\clsncx22.dll
[%SYSTEM%]\clsnol22.dll
[%SYSTEM%]\fkhjqhsj.dll
[%SYSTEM%]\mobho.dll
[%SYSTEM%]\mos.exe
[%SYSTEM%]\s4setp.exe

How to detect Morpheus:

Files:
[%SYSTEM%]\beegd10.ocx
[%SYSTEM%]\clsncx22.dll
[%SYSTEM%]\clsnol22.dll
[%SYSTEM%]\fkhjqhsj.dll
[%SYSTEM%]\mobho.dll
[%SYSTEM%]\mos.exe
[%SYSTEM%]\s4setp.exe
[%SYSTEM%]\beegd10.ocx
[%SYSTEM%]\clsncx22.dll
[%SYSTEM%]\clsnol22.dll
[%SYSTEM%]\fkhjqhsj.dll
[%SYSTEM%]\mobho.dll
[%SYSTEM%]\mos.exe
[%SYSTEM%]\s4setp.exe

Registry Values:
HKEY_LOCAL_MACHINE\software\morpheus\mediamanager
HKEY_LOCAL_MACHINE\software\morpheus\mediamanager
HKEY_LOCAL_MACHINE\software\morpheus\mediamanager
HKEY_LOCAL_MACHINE\software\morpheus\mediamanager
HKEY_LOCAL_MACHINE\software\morpheus\mediamanager
HKEY_LOCAL_MACHINE\software\morpheus\mediamanager
HKEY_LOCAL_MACHINE\software\morpheus\mediamanager
HKEY_LOCAL_MACHINE\software\morpheus\mediamanager

Removing Morpheus:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Kenny Backdoor Removal instruction
Win32.Flooder.MailSpam.VB.virus DoS Removal
SillyDL.4PW Trojan Cleaner
Pigeon.ACZ Trojan Cleaner

No comments: