PUP – Rapidly Increasing Computer Threat
PUP, or Potentially Unwanted Program, is a threat that is rapidly increasing, according to a new security research by PandaLabs. These are often installed without the consent of the computer user and can cause immense damage by capturing confidential information, or even by acquiring full control of the infected PC.
PUPs are generally installed with the aid of other malware like adware or Trojans. In the process, they add to and complete the whole threat package by putting off the security solutions or by showing pop-up ads, said Technical Director of PandaLabs, Luis Corrons, in a company press release. Press Releases published the release on September 29, 2007.
The press release of the company also noted that trojans MakeSnake.A and AttachMsngr.G circulated the most during the end week of September 2007. Brocat.B worm was also found many a times.
The MakeSnake.A Trojan performs a number of actions that appears most annoying. First, it shows on the screen a text: "WE NEED A DRINK!! PLEASE, HELP US, UGLY FACE" after which another text follows the mouse that meanders all over the computer screen like a snake. In addition, the Trojan creates new entries of the Windows registry type so that it can run on the system every time it reboots. Along with that, it conceals the search tool in the start menu.
The AttachMsngr.G Trojan steals user information like username and password by monitoring the user's keystrokes and every movement of the mouse. It also intercepts the user's conversation on MSN Messenger and uses the information for malicious purposes.
After the Trojan has harvested the information, it sends it to the remote attacker via e-mail. For that, the Trojan uses an SMTP engine of its own. AttachMsngr.G requires the affected user's intervention to reach his computer.
Brocat.B worm causes damage on the attacked PC by first modifying its Windows registry a number of times, thus disallowing the computer to function properly. It turns off applications like Windows registry Editor and the Task Manager. It also does not allow the wallpapers for Desktop to modify. The worm spreads through detachable and mapped drives.
Related article: PUP-installing Toolbar - the Most Common Malware
» SPAMfighter News - 17-10-2007