Monday, April 02, 2007 9:36 AM
cmosby
McAfee Avert Labs Blog - “MovieCommander! No it’s DnsChanger”
“MovieCommander! No it’s DnsChanger”
Monday April 2, 2007 at 3:41 am CST
Posted by Bhaskar Krishna
Trackback
There is a crafty trojan making the rounds on the Internet called “MovieCommander”. When looking at this title on a Window’s computer and reading the EULA description, as shown below, many innocent users may think this is a legitimate application designed to help access different video files:
Don’t be fooled! It’s actually a trojan installer which upon execution changes the DNS server address to point to its preferred DNS servers as well as dropping a rootkit under %system32% folder. The rootkit can be detected by McAfee Rootkit Detective as shown below:
Detection for the above malware is covered under trojan category as DNSChanger.f.
We caution all Internet users against such malware as we continue to protect our customers against such attacks.
Source: Computer Security Research - McAfee Avert Labs Blog
Filed under: Security and Anti-Virus, AntiVirus Information, Internet Hacks