|
|
|
VIRUS NAME
: PWS-MSNCrack
Trojan
Characteristics
This is an
MSN Messenger password-stealing trojan. It targets the Spanish version of Windows
and MSN Messenger. If the local user is logged into MSN Messenger when the trojan
is run, the user will be disconnected and the trojan's GUI (graphical user interface)
is displayed. It is designed to trick the user into thinking that they are logging
back on to MSN Messenger, when in fact the username and password the enter in
to the trojan Window is sent to the author instead. Below is an image of the
trojan form.
NOTE: This form is identical to the actual Spanish version of the MSN
Messenger log on screen. Therefore, simply seeing this image is not a conclusive
symptom of the trojan.
Symptoms
There are no obvious signs of infection. However, if non-Spanish speaking users
are prompted with a Spanish MSN Messenger prompt, this may be an indication
of this trojan.
Method
Of Infection
Trojans do not self-propagate. This trojan does not save additional copies of
itself to the system, nor does it install itself to load at system startup.
|
|
|
