|
Beware!: Free Zero POPUP toolbar packs a Trojan... |
|
|

This trojan uses "viral" marketing techniques to send an email message to all contacts found in the Windows Address Book and Eudora Address Book. This action is considered to be that of a trojan as the user does not have sufficient opportunity to agree to the End User License Agreement (EULA) displayed on the web page associated with this trojan installer. A link to the web page containing an installer for this trojan may arrive in an email message as follows:
Subject: Hi, i think you need this
Body:
Do you hate POPUPS ?? well i just installed this free Zero POPUP toolbar on my
browser, it kills ALL popup ads and best of all it's FREE !
Download it from here http://www.zeropopup.com (its a 10 seconds download with
a 56k modem) I hope you'll like it alot, it also has good rating on CNET
download.com
Bye :)
When a user clicks the hyperlink specified in the email message, they are taken
to a web page that contains an ActiveX control. This control is loaded at
startup, resulting in an immediate prompt which should warn you something is not
quite right NOTE: This control is signed with an invalid signature:. If
the YES button is pressed, the installer is run. The following files are
extracted to disk. - tellafriend.exe (trojan file) - zeropopup.inf
(installer setup file) - zeropopupbar.dll (potentially unwanted application
designed to prevent popup windows during browsing)
The tellafriend.exe
file sends email messages to all addresses found in the Windows Address Book
(WAB) and Eudora Address Book (nndbase.txt), using the default SMTP server as
specified in the Internet Account Manager or OMI Account Manager. And worst of
all it sends those messages to YOUR email contacts and pretends that YOU are
recommending it. But that is not all, the end user agreement ( which most people
don't read ) describes its other actions, which include changing the default
start page, and search page of YOUR Internet Explorer.

Article source and further details: Security News Portal
|
|
|
 |
| "Beware!: Free Zero POPUP toolbar packs a Trojan..." | Login/Create an Account | 0 comments |
|
| | The comments are owned by the poster. We aren't responsible for their content. |
|
|
|
No Comments Allowed for Anonymous, please register |
|
| |
|
Login |
|
 |
|
|
|
|
· New User? · Click here to create a registered account.
|
|
|
Article Rating |
|
 |
|
|
|
|
Average Score: 5 Votes: 1

|
|
|