Apropos

This page shows details and results of our analysis on the malware Apropos

Overview

This is a trojan detection. Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.


Minimum DAT

4640 (2005-11-30)

Updated DAT

4687 (2006-02-01)

Minimum Engine

5.1.00

File Length

N/A

Description Added

2005-11-30

Description Modified

2006-01-02

Malware Proliferation

Characteristics

-- Update January 2, 2005 --

Some installations  of Apropos are being classified as trojans.  These instances are installing rootkits (Rootkit SMECore ) and have self-preservation capabilities.  For full details on the Adware-Apropos family, please see:

http://vil.nai.com/vil/content/v_101223.htm

-- --

Symptoms

Method of Infection

Trojans are not viruses, and as such do not posess the ability to replicate.  They are spread manually, often under the premise that the executable is something beneficial. 

Trojans are often mass spammed by the author to entice people into double-clicking on them.  Distribution channels for such spamming include IRC, peer-to-peer networks, newsgroup postings, and email.  Alternatively, they may be installed by visiting a malicious web page - this is typically done either by clicking on a link, or by the website hosting a scripted exploit which installs the trojan onto the user's system without the need for further user interaction.  They may also be downloaded by other viruses and/or trojans to be installed on the user's system.

Variants