This variant of the BlackEnergy trojan drops various malware components hidden by a rootkit - with the possibility to install various plugins to execute payloads.
|
Minimum DAT
5914 (2010-03-08) Updated DAT5914 (2010-03-08) |
Minimum Engine
5.4.00 File LengthN/A |
Description Added
2010-03-08 Description Modified2010-03-08 |
? Presence of file and registry values mentioned above
? Increase in internet traffic
Trojans do not self-replicate. They are spread manually, often under the premise that the executable is something beneficial. Distribution channels include spam emails, IRC, P2P networks, newsgroup postings, etc...
All Users:
Use specified engine and DAT files for detection and removal.