Dr Web releases decoding utility for new Trojan

Softarea51.com is your source for all the latest computer technology and software related press releases.
Browse our archive for more press releases!

Released on: 2, June 2006
, Author: Doctor Web, Ltd.
, Audience: Software related

Recommended: System Errors? Click here to Fix your PC »


Virus monitoring service of Doctor Web, Ltd. informs all userson new modification of Trojan. Encoder detected by Dr.Web Anti-virus asTrojan.Encoder.6. Several variants of this Trojan program are detected at present. Different fromprevious versions, the TrojanÂ's author uses much longer encryption keys of 260 bits,which makes the process of decoding much more difficult. All versions of this Trojan program are distributed via e-mail as spam and acareless user may run the attachment and become a victim of the blackmailer - alldocument files of the invaded computer get encrypted. The user is offered to buy adecryptor; for this he should contact an unknown blackmailer via e-mail. After theTrojan has encrypted files, a readme.txt file of the following content appears ineach folder:

Some files are coded by RSA method.To buy decoder mail: k47674@mail.ruwith subject: REPLY

At present, virus analytics of Doctor Web, Ltd. have managed to find one of the keysused by the felon for crypting the documents of the victimized computer. The curingdecoding utility is soon to be released. The utility can be downloaded from www.drweb.com and should be used as following: 1.Call command line (press "Start" - Run - cmd) 2.Go to the directory with files tobe decrypted 3.Place the decoding utility rsad.exe to the same directory 4. Run thecommand line instruction rsad.exe [name _ of _ decryption _ file] [Enter] If the files were encrypted with the supported key variant, they will be decryptedand the file with the .decrypted extensions will appear. Virus analysts work hard tofind other two keys and soon new hot add-on to Dr.Web virus base will be released. Doctor Web, Ltd. informs all users to be very cautious with mail messages incomingfrom unknown addressees. Meanwhile, the preventive measures are recommended by Doctor Web, Ltd. to keep safefrom viruses  both for those who has an anti-virus program installed and for thosewho do not have any:  Use only a legal anti-virus software  only in this case you will receive hotadd-ons to virus database.  Keep abreast of updates.  Never open attachments arrived in suspicious e-mail messages or from unknowncontacts  Do not work under administrator account if you do not have any anti-virus programinstalled  If you have a suspicion that your computer is infected, and you do not have anyanti-virus installed, check your computer with FREE curing scanner - Dr.Web CureIt!.This utility will not only check the computer, but in most cases will cure removethe infection - not only viruses, but also spyware, adware, hacker tools and paiddialers.


Source: Express-Press-Release.com
Related downloads


AntiSpyware Plus is a complete solution against the spywares for individuals, professionals and home users. The software is specially designed to scan, detect, delete and also can recover malwares, adwares, spywares and trojans.

Anti-Trojan Shield is an advanced, highly effective blocker of Trojans, worms, viruses, and other malicious tools. It efficiently scans, detects, and removes malicious files, while maintaining an exceptional level of personal privacy and security.

Anti Trojan Elite is a trojan horse remover and system security manager.IE repairer;Network/Process/service management;Registry protector;System optimization.

Apollo started out as a MP3-player. It is recognized by its outstanding MP3 decoding quality, powerful continuous playback support and advanced playlist capabilities. It supports different file formats through so called input plug-ins.

AVC Plugin for WMP is the package of components for receiving and decoding media data from network and from any media storage. The plugin allows decoding of AVC/H.264 video as well as MPEG-4 AAC audio.

Elecard AVC plugin for ProgDVB allows clients to receive, decode and playback AVC/H.264 video channels from the satellite using ProgDVB application. Allows control of decoding quality and provides high-quality deinterlacing.

Password decoding software can decrypt encrypted outlook and outlook express password by getting information from encrypted *.mbx, *.dbx and *.pst files. Software can retrieve your lost login id and passwords of your email and news group accounts.

ffdshow is an open source decoder and encoder mainly used for the fast and high-quality decoding of video in the MPEG-4 and AVC (H.264) formats, but supporting numerous other video and audio formats as well.

ActiveX OCX to play OGG Vorbis media files , the decoding engine is loaded dinamically in the process , the processor time required to decode the OGG Vorbis is less than  MP3 files , the decoder quality is very good or better than MP3 files

Engine reads and decodes both barcodes from any scanned images (TIFF PDF JPG) of Driver Licenses and ID Cards. Automate the data capture with VB C++ or Delphi application. High performance solution comes with FREE SDK and Consulting services
Softarea51.com RSS Feed

Get RSS updates on latest computer technology and software related press releases Subscribe to Latest Press Releases RSS feed    Subscribe



You are welcome to include these headlines in your own pages. If you want to find out how to parse this RSS file please read our tutorial How to parse RSS feeds with PHP.