A Talking Trojan Erases System Files And Trashes PCs
A Trojan that talks sarcastically to its victims has come to exist. The BotVoice.A Trojan tells its victims about an infection setting onto their Windows PCs while it erases files and even trashes the computer, as reported by The Register on July 3, 2007.
The Trojan BotVoice.A makes use of the Windows text reader to play a note that says that the user's computer has been infected and its system files deleted; then it expresses regret and signs off wishing a good day and a good bye.
The message repeats the comments again and again while the Trojan works to delete all the content on the computer's hard disk. Sometimes the BotVoice.A is, however, unable to delete certain system files, which does not mean its harm is any less.
The Trojan still renders the computer inoperable. This happens because it alters the Windows registry and disables the programs deployed on the computer and also the task manager from running normally. It also impairs the Windows registry editor so that it can hide its malicious activities.
BotVoice.A is incapable of spreading by its own means. It requires the user's intervention to install itself on the target computer. The different mediums through which it gets transmitted are floppy disks, CD-ROMs, e-mail messages containing attachments, downloads from the Web, IRC channels, FTP, P2P file-sharing networks among others.
The nasty Trojan is rather peculiar as well, said Luis Corrons, Technical Director of PandaLabs. It not only wipes out computer files but also taunts the user audibly. In addition, the Trojan behaves in such a way that it becomes impossible to halt its actions. In such cases it is vital to stop the infection from spreading and to employ protection techniques that can proactively spot unknown threats, explained Corrons. Df Download Forge published this in news on June 30, 2007.
The other malware that PandaLabs detected recently include Gronev.A and Antihost.A viruses. Both infect computers in unique ways.
Related article: A New "Blackmailing" Variant Creeps Around…
» SPAMfighter News - 13-07-2007