W32/Frethem variant on the loose

Discussion in 'malware problems & news' started by Paul Wilders, Jul 15, 2002.

Thread Status:
Not open for further replies.
  1. Paul Wilders
    Offline

    Paul Wilders Administrator

    This new variant will possibly not be detected by some antviruses at the moment (although most have received a copy in the meanwhile).

    It seems the file "decypt-password.exe" creates a entry in c:/window/ trying to establish an internet connection using the standard procedure.

    Please keep your antivirus(es) updated!

    note: credits trojaner-info.de

    regards.

    paul
  2. Paul Wilders
    Offline

    Paul Wilders Administrator

    We have put a free Frethem Worm Remover up for download in the meanwhile. Those interested can grab a copy from our downloads page:

    www.wilders.org/downloads.htm

    note: credits Andreas Haak

    regards.

    paul
Thread Status:
Not open for further replies.