Welcome to MalwareRemoval.com, What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.
erwin_mi wrote:Several members of net-integration forums ( »forums.net-integration.net ) received multiple identical e-mails with a link to a trojan. Just a moment after I reported this issue, the forum got hacked.
Magnus wrote:When run, this trojan copies itself to C:\Windows\csrss.exe and also drops the file C:\Windows\dll.dll. The actual trojan is a password stealer that will attempt to grab your ICQ, email account, dialup and other passwords. Any found passwords are mailed to two russian email addresses.
If an Internet connection is available, the trojan will attempt to download and execute further files from a Hungarian web site. Unfortunately these files are no longer available and so could not be analyzed.
From : Net-Integration Forums <webmaster@net-integration.net>
Sent : Tuesday, August 16, 2005 8:03 AM
To : LINK REMOVED
Subject : Protect Your PC !!! ( From Net-Integration Forums )
| | Trash Can | Inbox
Received: from peace.emfc.com ([67.43.1.57]) by mc4-f37.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Tue, 16 Aug 2005 07:07:18 -0700
Received: from eagle1 by peace.emfc.com with local (Exim 4.44)id 1E5168-0007dh-BW; Tue, 16 Aug 2005 09:03:20 -0400
Sender: <eagle1@peace.emfc.com>
X-Message-Info: rbqtmZg9+AF1UA+EY2RQi5w2zpax+nsNhO4Xdn2WKL8=
X-Mailer: IPB PHP Mailer
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - peace.emfc.com
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [32004 32009] / [47 12]
X-AntiAbuse: Sender Address Domain - peace.emfc.com
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php admin.php
X-Source-Dir: net-integration.net:/public_html/forums
Return-Path: REMOVED LINK
X-OriginalArrivalTime: 16 Aug 2005 14:07:19.0674 (UTC) FILETIME=[D0B65DA0:01C5A26B]
Protect Your PC !!!
Users browsing this forum: No registered users and 29 guests
Contact us:
Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.