Comments
The Infector 1.7 bonus like
previous versions has a large server because it is released uncompressed.
This allows the server to be compressed by a "hacker" and not be detected
by trojan scanners. The Infector 1.7 bonus. creates a file setup.int. Setup.int
is a plaintext (you can view in notepad) file which logs all of the keys
you have typed. Note that this verison was released to prevent detection
by trojan scanners. This is the second time the author has recompiled this
trojan.
Note: This is a trojan
that can be submitted to us for analysis. We can possibly determine
for you the password that was used and the ICQ UIN that was being notified.
For more information on submitting trojan files to us read
here.
How To Remove
Quick fix: no quick
fix programs
Manual removal:
-
Change the shell=Explorer.exe
MSNAPPLICATION.exe to
shell=Explorer.exe in the
system.ini under [boot]. Which can be done
with any other text editing program
-
Reboot the computer or
close MSNAPPLICATION.exe.
-
Delete the trojan files
d3x.drv,
MSNAPPLICATION.exe
and setup.int in the windows directory.
|