Home / malware

PDF

TrojanClicker:Win32/VB.CW

First posted on 13 July 2010.
Source: SecurityHome

Aliases :

TrojanClicker:Win32/VB.CW is also known as TR/Dldr.VB.kvo.1 (Avira), Trojan.DownLoad.47390 (Dr.Web), Win32/TrojanDownloader.VB.OMF (ESET), Trojan-Downloader.Win32.VB.kvo (Kaspersky), Trojan.DL.Win32.VBcode.akz (Rising AV).

Explanation :

TrojanClicker:Win32/VB.CW is a trojan that connects to a remote server to increase the page view (PV) count for a certain HTML page.
Top

TrojanClicker:Win32/VB.CW is a trojan that connects to a remote server to increase the page view (PV) count for a certain HTML page. InstallationTrojanClicker:Win32/VB.CW may be installed by other malicious software. When run it performs it attempts to connect to the server "12345zt.com" and retrieve a page "1.htm". At the time of this writing, the page was unavailable.

Analysis by Xinrui Qin

Last update 13 July 2010

 

TOP