Mon, Oct 23 2006 14:55
Trojan Installs Anti-virus Software To Boot Competition Off Computer
A Trojan horse now making the rounds takes the unusual self-defense step of installing anti-virus software to scrub the victimized PC of competing malware, a security researcher said.
According to Jon Stewart of Atlanta-based SecureWorks, the SpamThru Trojan adds a pirated copy of Kaspersky Lab's AntiVirus for WinGate to a cloaked folder on the compromised machine. The illegitimate anti-virus program scans the system for malicious code -- passing over SpamThru's own files -- and then deletes what malware it finds when the PC next boots.
Filed under: News