trojan
Archived Posts from this Category
Archived Posts from this Category
Posted by admin on 30 Oct 2007 | Tagged as: malware, trojan, spyware, browser, internet explorer, internet
As the world’s most popular web browser, Microsoft’s Internet Explorer is used by over 80% of users on the Internet. This puts it way out in front of every other browser, but it also means that the software is required to reach out to the newest and obscurest of technologies.
While Internet Explorer is certainly the most popular, it’s not always the most reliable browser on the market. Each browser is different, and we’re going to look at some of the problems you could face while using Microsoft’s popular interface.
The biggest issue, and the source of most criticism directed at Internet Explorer, involves the danger of infecting your system through spyware and adware. There is no absolute way of eliminating malicious content from the web, but Internet Explorer is somewhat exposed to the dangers – more so than its rivals. This is due to the way that the program is structured, making it easier for hackers to attack your system.
It’s quite common to find the browser lagging - or even not working at all – after enabling an ActiveX control which isn’t as it seems. Whenever you load an ActiveX control in Internet Explorer, you’ll be given a warning about the content. It could seem completely innocuous, but after accepting, it’s possible for a malicious user to execute a “drive-by download” and effectively spam your computer without you so much as batting an eyelid.
Yes, this is still possible using Mozilla Firefox or any other browser. The difference is that Microsoft’s product is much more discrete about letting you know that you have a problem. Sometimes it won’t even tell you at all. The only way you’ll know for sure is by running a scan of your computer, or by using good ol’ common sense when the browser freezes up or overflows in third party advertisements.
A good spyware removal utility should clear up any issues related to the third party corruption of your browser, and believe us, there can be many. If you’ve been browsing the Net for a month without sufficient anti-Virus protection, the chances are that you’re harbouring some kind of malicious content.
It’s also good practice to delete your temporary Internet files on a regular basis. Every time you visit a website, a cookie is downloaded on to your computer. As you allow these to mount up, they can clog the system and ruin what was once a fresh browsing experience. They’re also very important when it comes to maintaining privacy in the websites that you’ve accessed.
Sometimes you’ll access websites and click on links which fail to load. This isn’t usually a trait of Internet Explorer, but of a toolbar that’s attached to it. Check to ensure that you have pop-ups enabled, since some sites will use the target=”_blank” key to open a page in a new window.
Other problems such as failed applets and scripting malfunctions can often be a sign that you’re Internet Options have been adjusted. Try going to Tools then Internet Options and under the access permissions, make sure that the three scripting boxes are checked. If they’re not, JavaScript will not run in the browser. This, as you can probably imagine if you have a web background, can cause a lot of difficulties.
With the release of Microsoft Internet Explorer 7, many of the security issues have been taken care of. But that’s not to say we should neglect the likelihood of opportunist attacks on the web. Be sure to browse safely with anti-Virus protection and clean your system regularly.
Posted by admin on 25 Oct 2007 | Tagged as: adobe, anti virus, antivirus, trojan, operating system
If you’ve browsed over Windows Task Manager and noticed a small file by the name of Adobe.exe, you’ve probably brushed it aside as a critical file that is required for Photoshop to work correctly.
While this is perfectly understandable given the unambiguous name of the file, you should remember that not every file is what it claims to be. In the case of Adobe.exe files, what you’re actually seeing is a third party virus, designed to look innocuous with the name of a globally respected company as its alibi.
As you can probably imagine, the hackers who work tirelessly on their virus creations have had to find a way to cloak their malicious files. Particularly in the case of spyware, but also in adware and medium threat viruses too.
If you’ve spotted Adobe.exe, you should take note that there is no such legitimate file – released by Adobe – which has that name. You can take a hint from the name itself. What is Adobe? It’s not a program. It’s not a crucial ImageReady or Dreamweaver executable file. It’s simply a company name.
The same distrust should be applied if you happen to see a Microsoft.exe file floating around your system. Hackers thrive on a breach of trust and by slapping a misleading name on their harmful files; they’re halfway towards doing the damage that they’d love.
You’ll find that a quick scan of your hard drive will swiftly highlight the Adobe.exe file. The problem is that most people opt to assume that the anti-Virus software has made a mistake! Why would it be pointing to a name that you know is safe?
A file doesn’t have to be named Big_Fat_Virus.exe to compromise the security of your computer. In most cases, instances of spyware are designed to replicate system processes in appearance. Of course, you can’t see what’s going on under the surface. And anybody who has had a brief scout around their critical system files is certain to have apprehension about deleting a file which claims to be System32.exe.
The best way to know if you’re affected is to run TWO scans of your hard drive, with two different anti-Virus suites. If both programs return the same Adobe.exe alert – or whatever suspiciously named file that you’re worried about – go right ahead and have the problem rectified.
We’re always being warned about the importance of using the Internet with sufficient protection from malicious users, and it’s because it IS very important.
You should have a strong firewall, capable of dealing with intrusions, and a commercial anti-Virus suite checking email attachments and downloaded files for traces of viruses.
But it’s also crucial that you don’t rely on an anti-Virus suite to do all of the hard work. It’s still a good idea to download a free system clean-up utility – there are many available on the Net – and to run it regularly. This will go a long way to cleaning spyware and adware, and it will also boost your system’s performance.
Always keep an eye out for files which are named after companies and respected IT brands. It’s very rare that one of those organizations will choose to release an executable file with such a vague and misleading name.
Get a Free Online Diagnostic Scan with RegCure PC Optimizer (Download Takes 2 Mins)
Posted by admin on 25 Oct 2007 | Tagged as: anti virus, antivirus, trojan
abg is a shortened term for the notorious abg-aceh.exe file. It is a well known virus, falling in to the Trojan category with a registered description. It is referred to as a Trojan.W32.Boetac, and for reasons that we’re about to discuss, it’s vital that you move to eliminate the threat if you find it on your system.
Not only does the Trojan.W32.Boetac open your computer to the hacking intent of malicious users, but it puts you in risk of being a victim of fraud.
abg.aceh.exe is the file to search for if you’re worried that your system security has been breached. A good way to do this is simply to open up the search dialogue and search for the virus file name. Unless you’ve been attacked by a variant of the abg, you’ll soon find the source of the infestation.
Removing the file on its own isn’t enough to get rid of the threat, however. The Trojan.W32.Boetac is renowned for running in the background, discretely failing to draw attention to itself.
So why does it matter if we have one? What does it do? Like many spyware applications, the abg is capable of tracking your actions. The only difference is the sheer comprehensive scale in which the Trojan.W32.Boetac will steal information.
Are you one of the many millions who now practices online banking? Do you use your credit card details to make purchases online? If the answer to either of these questions is yes, you’re opening yourself up to the danger of an opportunist attack from a web hacker.
The Trojan.W32.Boetac will steal your details, in the sense that it allows the hacker to “listen in” and trace your key strokes – even access your computer directly. Naturally, you won’t have any idea that this is taking place because the virus when left to operate normally will hide itself in the background.
All of those passwords that you use, or the personal data that you have stored on your hard drive, it’s all there at the hacker’s disposal. Think of the Trojan.W32.Boetac as the cyber equivalent of a crowbar to open your house. Once it’s been used, the robber – or in this case, the hacker – can do what he or she pleases.
So how can we get rid of the virus? As we already mentioned, deleting the abg-aceh.exe on its own will not be enough to starve off the hacker. You will need to run a full system scan with an anti-Virus utility. This will give you the chance to locate and remove the corrupted files.
It’s a good idea to remove the virus while operating in safe mode, as this is most likely to counter the measures taken by hackers to make their infestations “irremovable”. Use a registry cleaning utility to wipe all traces of Trojan viruses from the vital Windows Registry.
And of course, the best way to avoid the damage that an abg-aceh.exe file can inflict is to browse the Internet safely! Use anti-Virus protection, preferably a commercial suite, and always be careful when downloading attachments – both from websites and via email.
The Trojan.W32.Boetac virus is considered an extreme threat. It won’t wreck your system, but it’s the deadliest of spyware-style infestations that you can be carrying. If you see the abg-aceh.exe on your computer, act straight away to remove it.
Posted by admin on 25 Oct 2007 | Tagged as: registry cleaner, antivirus, trojan, windows
The a.exe file is a virus, also known as the W32.Ahlem.A@mm which was written in Visual Basic and became famous for being mass mailed as an email attachment. It is packed together using what’s known as the UPX run-time compression utility.
While the virus doesn’t compromise the overall integrity of a system, it can cause great unrest by mass emailing itself to everybody that you know. It does this by taking each of the addresses in your Windows log and running a macro-like process where it’ll submit over and over again, right the way until it has sent itself to all of your friends, family or work colleagues.
a.exe simply represents the name of the attachment that the W32.Ahlem.A@mm will try to send. It’s also been known – although not officially confirmed – that SARS_image.jpg is also being used to spread the worm.
The virus copies itself to a file named %Windir%\Csrss.exe every time you load up Windows. The worm will then re-execute and once again attempt to email the people in your Windows Address Book.
The best way to deal with the a.exe file is simply to cut it out before it reaches the system. This means installing a good anti-Virus suite and ensuring that email scanning and verification of downloads are both switched on. If you try to download the a.exe file with these measures in place, your protection will step in and spring an alert, informing you of the intrusion and safely neutralizing the threat.
To get rid of the immediate threat if you’re already carrying the virus, you should download a system clean-up utility. This will clean up spyware and adware, highlighting the issues that need your attention along the way. There are plenty of free tools available which are capable of removing the W32.Ahlem.A@mm.
You will also need to enter the Windows registry and change a value that was altered during the execution of the worm.
To do this, follow the steps below.
This process should remove the final traces of the W32.Ahlem.A@mm from your system and it will no longer replicate on start-up.
Please note that when using the Windows Registry Editor, it is extremely important that you avoid making mistakes and saving settings that are wrong. One wrong edit is all it takes to be locked out of your Microsoft Windows XP, and once you’re out, it can be hard to get back in!
If you don’t trust yourself to make those crucial changes, it’s a good idea to download one of the many free registry scanning packages. These automate the process of clearing redundant and corrupted files. You won’t need to access the registry yourself. You can sit back and let a developer’s hard graft do the work for you!
a.exe is just one of many email attachment threats that exist on the Internet. Be careful when downloading attachments and always be cautious when executing suspicious .exe files.
Posted by admin on 25 Oct 2007 | Tagged as: registry, registry cleaner, trojan, malware, internet explorer, windows
Not to be mistaken for a critical System 32 file, the 32.exe file is actually a worm which has become notorious for its widespread infection via email. The file preys on our instinct not to touch important looking files, and it also comes with a generator function that will place a random set of characters before the 32.exe. This is to dissuade people from searching the file by name and finding a fix for the problem.
It is deemed low risk and it doesn’t severely compromise the integrity of a system, but it has the capacity to spread rapidly due to its email formula.
It’s worth noting that the actual virus doesn’t come from an email attachment. It is spread by forcing people to click on innocuous looking links in email bodies. The virus then downloads on to the computer directly.
It becomes ingrained in the Windows Registry and this enables the worm to ensure that it is run every time the user restarts Windows. For that reason alone, it can be very difficult to delete without prior knowledge of what you’re looking for.
The 32.exe virus is officially referred to as a Win32.Bofra.E. It copies itself to the System directory but you will need to look closely to find it as there’s no easy way of telling what the prefix to the file will be.
The best way to avoid a 32.exe infection is to ensure that you have a sufficient anti-Virus protection suite in place. The idea of the virus is that while some protection apps may scan attachments for corrupt files, very few of them are capable of checking links in the email itself – until they’ve been clicked, of course. And at that time, it’s too late for many.
You should ensure that you have protection against phishing, which is known to have been contrived through the use of certain32.exe files. It’s also important to block out spyware and malware since these are both damaging not just in the sense that they clog your system, but they open the door for more harmful viruses too.
You will need to run a comprehensive scan of your hard drive to search out the 32.exe virus. It can be located quicker by simply scanning the System directory. But it’s a good habit to use scanning software on the entire hard drive. Pair this with a registry cleaner and you’ll be able to weed out the corrupted files.
Please note that it is necessary to use a registry cleaner, even if the disk-cleanup seems to do the trick at first.
The nature of the Win32.Bofra.E is that it is designed to re-spawn when you boot from scratch. If you don’t remove the registry entries that trigger the virus in to life, you will be simply removing it temporarily until the next start up.
You will only contract the virus if you are using Microsoft Internet Explorer when you open the email link. This is because the worm capitalizes on a security loophole whereby it’s possible to plant malicious content in an IFrame. The same technique isn’t such an issue if you’re using Mozilla Firefox or one of many independent browsers.
Get a Free Online Diagnostic Scan with RegCure PC Optimizer (Download 2 Mins)
Posted by admin on 11 Oct 2007 | Tagged as: trojan, antivirus, firewall, security, software, computer
There are several things that all users should be aware of when using a computer. Security has become a very important aspect to surfing the internet in a safe and effective manner and this guide will help you ensure that you are taking the proper precautions to stay protected from hackers.
First of all, you are going to want to make sure that you have an antivirus program installed on your computer. However, having an antivirus program is not enough. You also need to know how to use it correctly and how to update it regularly to get the most protection you can from it.
When selecting an antivirus program to use, make sure that it will protect you from all point of entry. The most common of course are Internet connections and e-mail. You are also going to want to make sure that your antivirus program offers regular updates, technical support, rapid response to new viruses that are discovered and an early warning system. If the antivirus program does not offer these, then you are not going to get the most out of it.
If you have already got an antivirus program on your computer, be sure to read all of the documentation that was provided with it so that you fully understand what to do in case a virus is detected. You will also want to perform regular scans of your system and make sure that your permanent protection is enabled so that the antivirus program is always checking for viruses while you are using the Internet and e-mail clients.
An antivirus program is not enough on its own. You are also going to need to install a firewall on your computer. A firewall will help to prevent unauthorized access to your computer and will often block software from downloading to your computer from unsafe websites. Once again, be sure that you fully read any documentation that came with your firewall software, so that you can properly configure it without exposing yourself to security risks.
Of course there are always some instances in which you could not prevent an attack on your computer. That is why it is a good idea to make regular backups of your files so that you can restore your computer in the case that an attack occurs. Be sure to prioritize your data so that it is easier to restore if it does get lost.
If you have followed the above steps, you are well on your way to a safe and secure computer. However, another way that hackers attack computers is by using security loop-holes in applications. That is why it is important to always install patches and updates that a developer has created for their software. You are also going to want to stay away from pirated software and patches often will not work on them and sometimes vunerabilities are included in the copy that you receive.
Finally, use your common sense. If you receive files that you were not expecting, do not open them. They could often contain a virus. Make sure that your antivirus program scans e-mail messages before you open them, even if you know the sender and no matter what you do, do not download from dubious Internet websites.
Posted by pcfix on 06 Aug 2007 | Tagged as: program, malware, trojan, operating system, spyware, software, security, computer
A Trojan horse is a small program that will install a malicious program on your computer. It will be disguised as something else to help trick a computer user into loading it. Sometimes a Trojan horse will appear to be a useful program or application but can be very harmful to your computer once it is executed.
There are two different types of a Trojan horse. The first one is useful software that has been modified by someone to include a malicious code that will run on your computer while you are running the other software. The other type is a program that has been disguised as something else such as a picture or game in an attempt to trick a computer user into running the file.
There are a few guidelines that should be followed so that you can protect yourself from the many Trojan horses that are out on the internet. Trojan horses are most commonly send through email systems so if you receive an email from someone that you do not know, do not open any attachments that are included in the email unless you can confirm the source of them first. Sometimes you may even receive a Trojan horse from someone you know as hackers are able to steal address books from time to time. If the email you have received from a friend does not make sense, then do not open any files attached to it.
When you are initially setting up your email application, be sure that you do not allow it to open attachments automatically. This would cause a Trojan horse to be executed before you can do anything about it. Some email applications have the ability to scan attachments before opening them. These would be preferable to one that does not.
Perhaps the most important thing that you can do to protect yourself from Trojan horses and Viruses alike is to be sure that you have an up to date anti-virus program running on your computer. If the anti-virus application has a setting for automatic updates, be sure to turn them on so that you do not have to worry about forgetting to update your definition files.
Finally, be sure that you are installing any operating system patches that are provided to correct security loop-holes and avoid using any peer to peer applications. Also, if you are still concerned about getting a Trojan horse, you can download and install an anti-Trojan program that can be found for free on the internet.
Get a Free Online Diagnostic Scan with RegCure PC Optimizer (Download Takes 2 Mins)