Released on: 13, April 2006
, Author: Olga Gorshkova, StarForce
, Audience: Software related
Last week Kaspersky Lab. detected first bank trojanTrojan-PSW.Win32.Agent. ew developed for bank info theft. SafeÂ'nÂ'Sec proactive PCprotection developers analyzed trojanÂ's behavior and made an expert decision  SafeÂ'nÂ'Sec blocks trojanÂ's malicious actions.In particular Trojan-PSW.Win32.Agent.ew invaded into De Postbank (Netherlands)computer network which is the last large bank in the country that uses TAN-codes.New tendency in ordered malware development is the following  cyber-criminals haveturned their attention from fishing to trojan programs.PSW (Password-Stealing-Ware) family of trojans steals various data from the infectedPC system passwords usually. After downloading this malware starts searching systemfiles with confidential content for ex. telephone numbers, Internet access passwordsetc. Gathered info is sent to e-mail address written in the trojanÂ's code.As far as Trojan-PSW.Win32.Agent.ew is concerned it starts its damaging activitywith including Internet Explorer into Windows brandmauer exclusion list throughregister key creating:\REGISTRY\MACHINE SYSTEM\CONTROLSET001\SERVIC ES\SHAREDACCESS\PARAMETERS\ FIREWALLPOLICY\STANDARDPROFIL E\AUTHORIZEDAPPLICATIONS\LIS T\C:\PROGRAMFILES\INTERNET EXPLORER\IEXPLORE.EXE All trojanÂ's technical data is stored increated register keys. Creating the keys Trojan-PSW.Win32.Agent.ew registers BHOInternet Explorer under Software Installation Snapin Extenstion name and then allowsBHO extensions via key creation. Creating C:\WINDOWS\system32\msnscps .dll file theprogram conceals as the following system file:
Product version: 5.1.2600.2180File version: 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)Int ernal name: Software Installation Snapin ExtenstionProduct name : Microsoft Windows Operating SystemPublisher : Microsoft Corporation
After that the trojan starts gathering confidential data and e-mailing it to thecustomer.
Trojan-PSW.Win3 2.Agent.ew is not dangerous for SafeÂ'nÂ'Sec -protected PC asSafeÂ'nÂ'Sec after analyzing the trojanÂ's behavior blocks system files changing andBHO extensions adding.
About SafeÂ'nÂ'Sec SafeÂ'nÂ'Sec provides the inner PC environment security as well as secure Internetnavigation. The program occupies minimum HDD (20 Mb) and uses no more than 2%processor resources as it doesnÂ't depend on signature updates. Being compatible andsuccessfully supplementing other IT security software SafeÂ'nÂ'Sec provides constantand reliable PC protection.
PR serviceOlga GorshkovaPR DirectorStarForce127106 Russia, MoscowAltufievskoe shosse 5/2Phone: +7 (095) 967-1451 ext. 236E-mail: olga.gorshkova@star-force.com http://www.star-force.сo m
Source: Express-Press-Release.com
Related downloads
Anti Trojan Elite is a trojan horse remover and system security manager.IE repairer;Network/Process/service management;Registry protector;System optimization.
Anti-Trojan Shield is an advanced, highly effective blocker of Trojans, worms, viruses, and other malicious tools. It efficiently scans, detects, and removes malicious files, while maintaining an exceptional level of personal privacy and security.
Bank Book for Windows: It allows you to keep track of your bank accounts. Unlimited number of entries, automatically sorted by transaction date.
You are a lovely butterfly on a special mission. Your job is to kill all those nasty insects attacking you. They are fast and ugly. You have to be even faster to shoot down all of them. You cannot allow them to take over your garden.
The pirates are attacking your fortress! Will you yield or will you stand up and fight them?Defend your fortress from piratical invaders with the help of some lead, a cannon, and a lot of gunpowder.
You are a micro fighting plane. Your job is to shoot and destroy all the nasty viruses attacking you. You have to rotate and shoot extremely fast to kill them. Those viruses have some impressive firepower.
"Missiles are attacking the city. Your mission is to destroy them. Thousands of Free Online Games, Free Flash Games, Free Games and Free Addicting Games at Factorygames"
The World War 2 is getting to the end. You are one of the best pilots of British air force. Your job is to shoot down a group of German planes which are attacking the London.
CallingID safe browsing toolbar automatically shows whether sites visited are real and safe to login, submit personal information or deal with. It displays the site owner's name, address and a risk indication for safe e-commerce and e-banking.
HTML-Color-Codes, a personal pocket-palette! Practice safe HTML with this cute collection of web-safe colors! No install required, no nasty spyware, adware or other critters!
Get RSS updates on latest computer technology and software related press releases 
You are welcome to include these headlines in your own pages. If you want to find out how to parse this RSS file please read our tutorial
How to parse RSS feeds with PHP.
