• E-mail
• Print
• Comment
• Font Size
• Digg
• del.icio.us
• Discuss article

Viruses and Intruders This Week: A Report By Panda Software, USA

Posted on: Monday, 30 October 2006, 15:00 CST

GLENDALE, Calif., Oct. 30 /PRNewswire/ -- Panda Software, USA reports the appearance of Spamta.IC and Mytob.QA worms as well as ProxyServer.D Trojan this week.

Spamta.IC is a worm designed to send the SpamtaLoad.N Trojan via email. Messages sent out purport to be 'send failure' notices, and include an attachment, containing the Trojan, with the typical text file icon. As the user runs the file, the system gets infected by SpamtaLoad.N. thus carrying out a series of actions, which includes downloading Spamta.IC onto the target computer.

Spamta.IC also creates a series of entries in the Windows Registry to ensure that it runs every time the system is started up.

Mytob.QA is a worm with backdoor characteristics that connects to a server waiting to receive commands from a remote attacker. To propagate, Mytob.QA looks for email addresses in the files of infected computers and sends out messages with the subject Account Alert!

These actions performed by this worm include termination of memory processes belonging to several security tools such as antivirus programs or firewalls.

Finally, ProxyServer.D is a Trojan designed to download several files from a web page, using rootkit techniques to hide them. The Trojan also installs a driver and creates a proxy server on a random port of the affected computer.

ProxyServer.D can even monitor the Internet connection speed of each computer that has it installed. It does so by downloading the ICQ program from a web page and sending a call to several IP addresses to check the response time.

Like most Trojans, ProxyServer.D cannot spread automatically, but needs intervention from malicious users. The means of distribution used vary and include floppy disks, CD-ROMs, email messages with attachments, Internet download, files transferred via FTP, IRC channels, P2P file sharing networks, etc.

For more information about these and other computer threats, visit Panda Software's Encyclopedia.

About Panda Software, USA

Panda Software (http://www.pandasoftware.com/) is a world-class developer and provider of integrated security solutions designed to neutralize viruses, hackers, Trojans, spyware, phishing, spam and other pervasive Internet threats. With Panda Software's revolutionary TruPrevent(TM) Technologies, the company's innovative products are on the leading-edge of intelligent security solutions, ensuring clients are protected even against new threats that have yet to be identified. PandaLabs, the most rapid response laboratory in the industry, delivers comprehensive updates to users, providing a worldwide response to malware 24 hours a day, 7 days a week, all year round.

For further information, please visit http://www.pandasoftware.com/ or call Sonia Awan at 818-543-6909.

Panda Software, USA

CONTACT: Sonia Awan, Director of Public Relations of Panda Software, USA,+1-818-543-6909, sawan@pandasecurity.com

Web site: http://www.pandasoftware.com/

Source: PRNewswire

More News in this Category