Showing posts with label Infostealer. Show all posts
Showing posts with label Infostealer. Show all posts

Monday, September 03, 2007

Bot Infections Multiply Like Bunnies: SDFix to The Rescue

Within the world of malware there are a couple of infections which seem to develop new variants very quickly. The type which seem to be the fastest, with new variants uncovered daily are of the 'bot' variety. These include but are not limited to backdoors, proxies, password stealers, downloaders\droppers and spambots.

Their names can strike fear in the hearts and minds of IT professionals all across the world not to mention make a home user nearly passout. Hacker Defender, InfoStealer, Rustock are but to name a few.

These can in many cases be cleaned up, tho to be honest, wiping the drive and reformatting to reinstall Windows is probably the best advice. If you have one of these then you'll be needing to use a specialized tool called SDFix, by Andy Manchesta.

Do not attempt to clean any bots on your own. These can require some specific registry fixes even before you begin cleaning, not to mention many bots are coded to prevent running of removal tools. Instead first install and run HijackThis! and post the resultant log into my Countermeasures: Extraction Hlep forum and I'll assist in removal.

Sunday, May 27, 2007

InfoStealer Trojan Injects Code To Fool Users

Users who routinely adhere to good security behavior and type in urls to their banks as opposed to following links can be duped into giving their info anyway. It seems as tho the creators of this malware have injected to to add fields for additional info. They never cease to amaze me in their abilities to circumvent almost any sort of barrier put up. The good folks at Symantec provide anlysis. Read & Discuss Here