Spyware Warrior Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
 
FAQ :: Search :: Memberlist :: Usergroups :: Register
Profile :: Log in to check your private messages :: Log in

VB Trojan variant

 
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Virus, Worm &Trojan Alerts
View previous topic :: View next topic  
Author Message
Proactive Services
Security Expert


Joined: 06 Feb 2006
Last Visit: 24 Jun 2009
Posts: 169
Location: Hampshire, UK

PostPosted: Thu Mar 09, 2006 11:09 am    Post subject: VB Trojan variant Reply with quote

Got a phishing email today pointing to a GoDaddy IP address pretending to be Windows Update. It's serving an exe which steals the contents of the Windows Protected Storage (where web site and other login details are kept) as well as taking screen shots of the Desktop and allowing remote access to the author.

The domains involved are:
dxtserver.net
dxtserver1.net
dxtserver2.net
wnplake.net
pcid.com

Few anti-virus vendors are detecting this virus yet so you should add these domains to any blocking list you have - if any of the helpers would like further details (such as the phishing site IP) etc. please contact me by PM.
_________________
Adam Piggott, Proprietor, Proactive Services (Computing)

Professional, friendly computer support in Hampshire, UK.
Back to top
View user's profile Send private message Visit poster's website
suzi
Site Admin


Joined: 27 Jul 2003
Last Visit: 28 Nov 2014
Posts: 10335
Location: at the beach

PostPosted: Thu Mar 09, 2006 1:27 pm    Post subject: Reply with quote

Adam,

Thanks for the info. We are checking into it.

Best,

Suzi
_________________
Former Microsoft MVP 2005-2009, Consumer Security
Please do not PM or Email me for personal support. Post in the Forums instead and we will all learn. Smile
Back to top
View user's profile Send private message Visit poster's website
Moore
Moderator


Joined: 31 May 2004
Last Visit: 16 Jun 2014
Posts: 758
Location: .MooreLand.

PostPosted: Thu Mar 09, 2006 9:02 pm    Post subject: Reply with quote

Seems to be shut down now , great work. Cool
_________________
| Stop Malvertising | Outpost | Blocklist Pro | Hosts |
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Virus, Worm &Trojan Alerts All times are GMT - 8 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group