Spyware/SmitFraud Infection and Phishing Attempt



Video download from www.websense.com showing a real-time infection of a spyware trojan on a computer caused by visting a website that hosts a spyware installer. This is just a demonstration of how dangerous spyware is if you don’t have the right protection software installed. The computer was more than likely wiped and formatted after being at the mercy of this infection. If you can’t see the video well, this is what it does: 1) The user who is controlling the computer types in a website address into Internet Explorer and hits enter. The file he downloads automatically opens up and starts opening up with Windows’ Picture viewer – but the file he download wasn’t a picture. 2) Immediately the file runs a batch command (the black screen) which is basically like an installer for the virus. Suddenly a whole load of new icons appear on the desktop. 3) An icon also appears in the system tray and the balloon tip says “Your computer is infected!”. In fact, this is not a message from the Windows OS, but it is a fake message from the virus that asks the user to run a fake anti-virus software to “remove” it from your computer. In actual fact, the message is true, but what users don’t realise is that the message itself is the virus. 4) Suddenly the desktop changes (you notice by now that the computer is running much slower due to the virus infecting the whole computer) to a picture the virus put on there. 5) A new icon appears on the desktop called WinHound and the program starts


Leave a Reply

Your email address will not be published. Required fields are marked *