if ($_SERVER["HTTP_X_FORWARDED_FOR"])
{
$_SERVER["REMOTE_ADDR"] = preg_replace('/.*,\s*/','', $_SERVER["HTTP_X_FORWARDED_FOR"]);
}
?>
Notice: Undefined index: related in /data/www/spywareguide/product_show.php on line 49
Notice: Undefined variable: incprefix in /data/www/spywareguide/product_show.php on line 241
Category Description:
Trojans are malicious applications that pose themselves as legitimate software in order to trick users to install them. Once on the victim's machine, it may run any number of malicious process to steal vital information or inflict damage to other software.
Official
Description:
This trojan utilizes IE exploits to infect the computer.
pqnelhleyy ac1f108b 65106093
Downloads malicious files into infected users' computer.
Comment:
Exploits the MS06-014 vulnerability.
Manual
removal:
1. Open Process Explorer and select winlogon.exe (in the upper pane).
2. In the lower pane, look for the following files and close their Handles (by right clicking over it)
%windir%\system32\wsnpoem\video.dll
%windir%\system32\wsnpoem\audio.dll
%windir%\system32\ntos.exe