Technology news and Jobs
Fuzzy Logic
TrustDefender and the Trojan Vundo story
Fuzzy Logic
TrustDefender and the Trojan Vundo story | TrustDefender and the Trojan Vundo story |
|
| by Alex Zaharov-Reutt | |
| Sunday, 21 December 2008 | |
|
Page 1 of 3
Even with anti-virus protection, this is the story of Vundo Trojan
infecting a protected computer anyway. A different anti-virus product
removed the Trojan, but it kept coming back, so here’s how the Trojan
was removed, and how TrustDefender would have kept that user protected
– despite being infected. Featured Whitepaper
5 Best Practices for Smartphone Support
It also shows how difficult some of these programs are to remove, unless you are a computer expert, and interestingly it shows how TrustDefender would still keep your banking or other transactions secure – even if you are infected by a banking (or other) Trojan and don’t know how to get rid of it – or even know it’s there. Banking transactions are but one form of transaction that TrustDefender secures. Others include those from online stores, government websites, e-health or any online business that wants customers to log in and transact – without fear that a Trojan or other malware is going to snoop in or otherwise steal data. The blog entry speaks for itself, so read it at the link above, or read on right here: “The Trojan Vundo story “In this blog, we normally analyse nasty Trojans or other nasty stuff that is - in almost all cases - so new that very few Antivirus Engines can pick it up and protect the user (see e.g. the post about the Yaludle/Silentbanker Trojan). “However, today the story is about a typical internet user, about Joe the Plumber, about the Hockey-Mum, about an old Trojan and about the reality out there in the world wide web. “Paula (not her real name) had AVG Free 8 and SUPERAntispyware installed and both components were up-to-date, however she got infected with a Trojan of the limbo family that stole her login names and passwords and only after 9 days it got removed partly by SUPERAntispyware and after 10 days completely by AVG. 10 days!!! “Two months later, she got infected again, this time with the Vundo Trojan even though she has AVG8 & SUPERAntispyware installed. Most probably she got infected through a vulnerability, through a compromised website and/or she got tricked into downloading it deliberately. Unfortunately we have seen this way too often. “But the most interesting part for us was the behavior of the user (Paula) and the current Security Software. For the first 7 days since infection, she didn’t notice anything. No alerts from AVG, however she noticed that she got to funny websites and got offered to install Antivirus 360!!! “After approx 7 days, she got a message box from AVG saying that there are some DLL’s on her computer with the Vundo Trojan. However AVG couldn’t remove the DLL’s (as they were protected with rootkit-techniques). Now she knew her system is compromised but her Antivirus failed to secure her!!! “The issue here is that the lay person has no idea if they are protected or not and Paula was not protected.” The blog post continues on page 2, please read on... |
| < Next story in category | Previous story in the category > |
|---|











