Trend Micro - Trojan ‘TROJ_INDUC.AA’ Infects Delphi Compliers

Trend Micro, an online security company, states that Borland Delphi Compilers have been the target of a new virus attack that is becoming a global problem, with security vendors receiving reports of increased infection incidents.

Trend Micro has detected the file infector as PE_INDUC.A which tampers with Borland Delphi Compliers integrated in the targeted system. This leads to the corruption of all files complied with the help of Delphi complier. Bortland Delphi is a tool developed using Pascal programming language for compiling several famous enterprise database and desktop applications.

Trend Micro security experts said that after execution, PE_INDUC.A checked the Delphi installation on the computer through the verification of a particular registry key. Moreover, it accumulated the information about the location of Delphi installation folder from this registry key. Thereafter, it started searching certain files which it could modify by altering codes. With the help of Delphi complier, PE_INDUC.A complies a new copy of files modified by it earlier. This new complied filed is called TROJ_INDUC.AA, said Trend Micro security researchers.

Once this process completes, all the files complied by Delphi compiler will be compromised, said the security researchers.

Robert Poston, Security Expert, SophosLabs said in a blog post in the fourth week of August 2009 that netizens who received the application infected with W32/Induc-A should get in touch with their supplier.

Although the virus has not caused any trouble till now, it has the potential wreak havoc if authorized applications were quarantined by the antivirus, said security experts.

Michael St. Neitzel, Vice President of Threat Research and Technologies, Sunbelt Software, said that when an antivirus scanner identified an application as corrupted by Win32.Induc, it raised a direct question whether the scanners would clean them or not, as reported by COMPUTERWORLD on August 24, 2009.

Hence, security vendors such as Sunbelt and Trend Micro have taken up it as challenge for themselves and their customers who are ultimate sufferers.

Related article: Trend Micro Detects Spam Mail Declaring World War III

» SPAMfighter News - 9/9/2009