KezNews.com
DownloadsOther NewsForumBlogsWallpapersJokewareSearch

News letter:


Enter Your E-mail:

Windows Infection Deleting The Program Files Content


section: windows, for your questions: KezNews forum, 26.11.2007

Security company Trend Micro today released an advisory concerning TROJ_AGENT.ADNA, a new Trojan horse which attempts to remove a file usually placed inside Program Files, a folder created by Windows which usually stores the content needed by the installed applications.




According to the advisory, the infection affects most versions of Microsoft's operating system including Windows 98, ME, NT, 2000, XP and Server 2003. In addition to the Program Files removal, the Trojan also attempts to modify some registry entries which could change the way your firewall works and make it useless in front of other web attacks.

"It also attempts to delete the file TORUN.EXE, if found in the Windows Program Files folder," Trend Micro added. Just like many other infections, the Trojan creates a new registry entry in order to start every time the operating system is loaded. In case you're wondering how you can get infected you should know that this Trojan is usually installed by another malware or it can be downloaded through infected websites without users' approval.

"This Trojan arrives as a file downloaded unknowingly by a user when visiting malicious Web sites," Trend Micro wrote in the security advisory. "It drops copies of itself. It attempts to delete a certain file from the Windows Program Files folder. Moreover, it attempts to disable certain firewall applications by deleting registry entries."

Having a look at the ratings mentioned by Trend Micro, you might believe the Trojan is not as dangerous as it sounds because it only has a damage potential and a distribution potential set too low.

Because the infection is pretty new, there's no report concerning the number of the affected computers yet but the consumers are still advised to keep their antiviruses up-to-date with the latest virus definitions and apply the latest patches as soon as they are released.

source: news.softpedia.com

send email Send link 2 friend  |  Permalink
<< previouse article
Did Microsoft's Security Focus Hurt Vista Adoption?
next article >>
What’s on tap for Windows Live Messenger 9?

MORE RELATED ARTICLES:
Windows Registry Editor, Task Manager and Folder Options Disabled by New Infection || Vista sets 2007 land-speed record for copying and deleting || Exclusive Content for the Xbox GTA Is Microsofts Last Stand || Windows Vista and Exported Event Log Files || Microsoft Ships Deleted Files with the Free Copies of Windows XP SP2

Comments(3)

Nothing new. Norton detected this long ago

By Trojan Killer on 27.11.2007 - 02:11
shame the "troj_agent.adna". piece of trash

torun.exe?

By King Tubby on 27.11.2007 - 12:11
autorun.exe shurely? i don't have either on my system.

Norton couldnt detect itself

By psycho on 27.11.2007 - 17:11
i take it you dont know about nortons self detect virus detected by norton cleaned by norton written by borton
which mag only 64% efective
kasperskey 99%



No new comments are allowed for this article.

For your questions use our KezNews Forum