Your Ad Here Your Ad Here
Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: New Trojan!

  1. #1
    Poster
    Join Date
    Oct 2002
    Location
    Somewhere in the USA
    Posts
    30
    Taken from SNP SecurityNewsPortal


    Free Zero POPUP toolbar packs a Trojan...
    PopUP Killer and ZeroPopUps pack trojan payload
    02-17-2003 08:41:21 AM CST

    This trojan uses "viral" marketing techniques to send an email message to all contacts found in the Windows Address Book and Eudora Address Book. This action is considered to be that of a trojan as the user does not have sufficient opportunity to agree to the End User License Agreement (EULA) displayed on the web page associated with this trojan installer. A link to the web page containing an installer for this trojan may arrive in an email message as follows:
    Subject: Hi, i think you need this

    Body:
    Do you hate POPUPS ?? well i just installed this free Zero POPUP toolbar on my
    browser, it kills ALL popup ads and best of all it's FREE !

    Download it from here http://www.zeropopup.com (its a 10 seconds download with
    a 56k modem) I hope you'll like it alot, it also has good rating on CNET
    download.com

    When a user clicks the hyperlink specified in the email message, they are taken to a web page that contains an ActiveX control. This control is loaded at startup, resulting in an immediate prompt which should warn you something is not quite right NOTE: This control is signed with an invalid signature:. If the YES button is pressed, the installer is run. The following files are extracted to disk.
    - tellafriend.exe (trojan file)
    - zeropopup.inf (installer setup file)
    - zeropopupbar.dll (potentially unwanted application designed to prevent popup windows during browsing)

    The tellafriend.exe file sends email messages to all addresses found in the Windows Address Book (WAB) and Eudora Address Book (nndbase.txt), using the default SMTP server as specified in the Internet Account Manager or OMI Account Manager. And worst of all it sends those messages to YOUR email contacts and pretends that YOU are recommending it. But that is not all, the end user agreement ( which most people don't read ) describes its other actions, which include changing the default start page, and search page of YOUR Internet Explorer.

    I don't know what I hate worst... web site owners that force multiple pop up ads at me or scum bag companies that infect my computer and send out false endorsements supposedly from me to promote their trojan packed software. Bottom line is that this company cannot be trusted and their crappy product should NOT be installed on your computer. And if you did install it - REMOVE it using the instructions provided at the McAfee web site. This is yet another scumbag company that I would not shed a tear if hackers attacked them..


    More
    http://vil.mcafee.com/dispVirus.asp?virus_k=100065
    http://vil.mcafee.com/dispVirus.asp?virus_k=100063

  2. ** REGISTER to REMOVE This Ad On The Site!! **
    Your Ad Here Your Ad Here
  3. Software & Hardware   -   #2
    Thanks for the heads-up. Good old Popup Stopper from ZD Net is hard to beat.

  4. Software & Hardware   -   #3
    Member
    Join Date
    Feb 2003
    Posts
    11
    Originally posted by TIDE-HSV@18 February 2003 - 16:43
    Thanks for the heads-up. Good old Popup Stopper from ZD Net is hard to beat.
    Yeppers
    pop-up stopper is what I use. Now I just need to find a good pop blocker for Netscape any-1 know of a good 1 that trojin free

  5. Software & Hardware   -   #4
    krome's Avatar triplesix clubhouse
    Join Date
    Jan 2003
    Location
    miami , fl
    Posts
    596
    This is like a spyware also isn't it? Would ad-aware and spybot dectet it if it is?

  6. Software & Hardware   -   #5
    TRshady
    Guest
    Thanx for that detailed article, I use norton internet security 2003 and that blocks all pop-ups. Makes you think how many people who could and will be fooled doesn't it?

  7. Software & Hardware   -   #6
    does it really kill all popups?

  8. Software & Hardware   -   #7
    wormless's Avatar Beauty
    Join Date
    Aug 2003
    Location
    uk
    Age
    36
    Posts
    1,097
    googletoolbars blocks or allows pop ups . pop up stopper i ahve n norty 2003. norty blocks pop ups adblocking trojans lol

  9. Software & Hardware   -   #8
    Originally posted by TRshady@20 February 2003 - 04:26
    Thanx for that detailed article, I use norton internet security 2003 and that blocks all pop-ups. Makes you think how many people who could and will be fooled doesn't it?
    i agree and congrats on ur mellinium.

  10. Software & Hardware   -   #9
    Wise Kvcd Maker/PIMP
    Join Date
    May 2003
    Age
    31
    Posts
    4,051
    Originally posted by BigTcronic@18 February 2003 - 12:31
    Taken from SNP SecurityNewsPortal


    Free Zero POPUP toolbar packs a Trojan...
    PopUP Killer and ZeroPopUps pack trojan payload
    02-17-2003 08:41:21 AM CST

    This trojan uses "viral" marketing techniques to send an email message to all contacts found in the Windows Address Book and Eudora Address Book. This action is considered to be that of a trojan as the user does not have sufficient opportunity to agree to the End User License Agreement (EULA) displayed on the web page associated with this trojan installer. A link to the web page containing an installer for this trojan may arrive in an email message as follows:
    Subject: Hi, i think you need this

    Body:
    Do you hate POPUPS ?? well i just installed this free Zero POPUP toolbar on my
    browser, it kills ALL popup ads and best of all it's FREE !

    Download it from here http://www.zeropopup.com (its a 10 seconds download with
    a 56k modem) I hope you'll like it alot, it also has good rating on CNET
    download.com

    When a user clicks the hyperlink specified in the email message, they are taken to a web page that contains an ActiveX control. This control is loaded at startup, resulting in an immediate prompt which should warn you something is not quite right NOTE: This control is signed with an invalid signature:. If the YES button is pressed, the installer is run. The following files are extracted to disk.
    - tellafriend.exe (trojan file)
    - zeropopup.inf (installer setup file)
    - zeropopupbar.dll (potentially unwanted application designed to prevent popup windows during browsing)

    The tellafriend.exe file sends email messages to all addresses found in the Windows Address Book (WAB) and Eudora Address Book (nndbase.txt), using the default SMTP server as specified in the Internet Account Manager or OMI Account Manager. And worst of all it sends those messages to YOUR email contacts and pretends that YOU are recommending it. But that is not all, the end user agreement ( which most people don't read ) describes its other actions, which include changing the default start page, and search page of YOUR Internet Explorer.

    I don't know what I hate worst... web site owners that force multiple pop up ads at me or scum bag companies that infect my computer and send out false endorsements supposedly from me to promote their trojan packed software. Bottom line is that this company cannot be trusted and their crappy product should NOT be installed on your computer. And if you did install it - REMOVE it using the instructions provided at the McAfee web site. This is yet another scumbag company that I would not shed a tear if hackers attacked them..


    More
    http://vil.mcafee.com/dispVirus.asp?virus_k=100065
    http://vil.mcafee.com/dispVirus.asp?virus_k=100063
    The punks who make them and try to infect your computer wanna-be hackors.

  11. Software & Hardware   -   #10
    wormless's Avatar Beauty
    Join Date
    Aug 2003
    Location
    uk
    Age
    36
    Posts
    1,097
    http://www.search.com/search?channel=3&q=F....dl.sr.also.web highlight over the liks wen u been to this pg says free Zero POPUP toolbar with +sign inbetween words

Page 1 of 2 12 LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •