The Porn Trojan is back: Oh No!
You may remember me blogging about this a while ago: The porn trojan is no more. That was when ICANN decided to ’shutdown’ ESTDomains.
Well, the porn trojan is back… For those not familiar with it, here is a bit of history:
About 2 years ago, we found a file -to be precise a Trojan Horse- which did some very peculiar things.
When executed, the file connects to a malware server and starts to download thousands of porn pictures on your PC. Let’s be a bit more clear: these come from the nastiest of sites.
Along with the porn stuff, usually comes other malware threats, rogue apps etc…
The registrar for the site is: TODAYNIC.com, INC.
The file creates several registry keys to make sure it will resume its payload once you restart the computer:
Jerome
Comments:
|
|
