Trojan Installs Anti-Virus, Removes Other Malware

← Back to Stories (view on slashdot.org)

Trojan Installs Anti-Virus, Removes Other Malware

Posted by ryuzaki0 on Friday October 20, 2006 @11:25PM from the clever-little-monkey dept.

An anonymous reader writes "SpamThru takes the game to a new level. The new virus uses an anti-virus engine to remove potential 'rival' infectious code." From the article: "At start-up, the Trojan requests and loads a DLL from the author's command-and-control server. This then downloads a pirated copy of Kaspersky AntiVirus for WinGate into a concealed directory on the infected system. It patches the license signature check in-memory in the Kaspersky DLL to avoid having Kaspersky refuse to run due to an invalid or expired license, Stewart said. Ten minutes after the download of the DLL, it begins to scan the system for malware, skipping files which it detects are part of its own installation."

17 of 202 comments (clear)

Min score:

Reason:

Sort:

Hmm.. by Anonymous Coward · 2006-10-20 23:27 · Score: 4, Funny

It sounds a little too intelligent to have been designed by humans.

Cyclons? I hear they are hot!
1. Re:Hmm.. by Aladrin · 2006-10-20 23:34 · Score: 5, Funny
  
  Cylons, I think you mean. And yeah, there's 2 or 3 that are pretty awesome. Nothing like having sextuplets for... well, sex.
  
  But I do agree that this guy is either extremely forward thinking, or a madman. His own virus could prevent any further viruses he writes... That's... Stupid. :D
  
  I was immediately outraged at the illegal install of software, but then I remembered the virus itself was illegal anyhow, so it didn't much matter. It's like murdering everyone in a church on Sunday, and then spraypainting graffiti on the walls. Somehow, it's just not that much worse.
  
  --
  "If you make people think they're thinking, they'll love you; But if you really make them think, they'll hate you." - DM
2. Re:Hmm.. by Dunbal · 2006-10-21 01:00 · Score: 4, Funny
  
  It's like murdering everyone in a church on Sunday, and then spraypainting graffiti on the walls.
  
  Why spraypaint when you can use all the blood - it just look so much cooler, uh, wait...
  
  --
  Seven puppies were harmed during the making of this post.
Potential for good, and evil by Anonymous Coward · 2006-10-20 23:28 · Score: 5, Funny

Wake me up when it also installs linux.
1. Re:Potential for good, and evil by SmurfButcher+Bob · 2006-10-21 03:34 · Score: 5, Funny
  
  > Second it install anti-virus software that chews up computing resources with out doing anything useful.
  
  If *that* were true, it would have installed NAV.
  
  *cough*
  
  --
  
  help me i've cloned myself and can't remember which one I am
Re:This is great! by Mikya · 2006-10-20 23:40 · Score: 5, Funny

Hopefully we will see a new "virus" war, hasn't it been quite a while since the last one?

There's a reason for all those extra cores in the upcoming processors. :)
A Trojan that Installs Anti-Virus & removes ot by Anonymous Coward · 2006-10-20 23:42 · Score: 5, Funny

Malware is commonly known as the Norton Antivirus installer. ;)
Sounds good! by 1.000.000 · 2006-10-20 23:44 · Score: 5, Funny

Where can i get this trojan?

--
This is a viral signature. You are now infected!
Darwin, Schmarwin by CheeseburgerBrown · 2006-10-20 23:47 · Score: 5, Funny

I know before too long they'll be some long and nearly interesting thread about the Darwinian loveliness manifest in this virus' competitive adaptation, but I think it instead provides a firm basis to identify the handiwork of Intelligent Design.

In other words, God spams.

He Is That He Is has simply moved on from meat-based proselytizing and entered the so-called Cyber Age, as was foreseen in Deuteronomy 4:20, Revelations 1:1415, and Glossary 36:D.

--
These stories are free but worth money.
Great Idea! by CalSolt · 2006-10-21 00:00 · Score: 5, Funny

I'm just waiting for Microsoft to release a virus that'll force everyone to run Automatic Update. Think of how many problems it would solve!
Re:A wise move by jbourj · 2006-10-21 00:01 · Score: 5, Funny

I can just see the rival spyware companies' lawsuit: "the users were never promted and asked if they wanted our product removed."
Er.... by spasticfraggle · 2006-10-21 00:16 · Score: 5, Funny

2? Those bloody integers, eh?
1. Re:Er.... by davecrist · 2006-10-21 02:23 · Score: 5, Funny
  
  I'd say 2 was the prime suspect, at least... 8)
Re:This is great! by iMouse · 2006-10-21 01:00 · Score: 4, Funny

Wait! I have the answer! Just install WinAntiVirus and WinAntiSpyware Pro 2006! It'll download the Trojan, you pay your $24 or whatever, and it all disappears!

Wait...what's that "annoying as hell" flashing icon in my taskbar for...?
Re:Sounds like .. by Orgazmus · 2006-10-21 01:19 · Score: 4, Funny

Please dont use Peter Norton's name in connection with Symantec's Anti-CPU Suite. Thank you

--
The system had the verbosity of HTML combined with all the readability of compiled assembly viewed as bitmap images
Re:This is great! by StarfishOne · 2006-10-21 02:06 · Score: 5, Funny

Graphical Processing Unit, Physics Processing Unit,... Virus Processing Unit? :)

It should be noted though, that a "Virus Accelerator Board" is not a very good name from a marketing perspective! :P
Re:This is great! by Ruff_ilb · 2006-10-21 03:48 · Score: 4, Funny

Viral marketing?

--
http://www.TheGamerNation.com/Forums