W32/Frethem variant on the loose

Discussion in 'malware problems & news' started by Paul Wilders, Jul 15, 2002.

Thread Status:
Not open for further replies.
  1. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,475
    Location:
    The Netherlands
    This new variant will possibly not be detected by some antviruses at the moment (although most have received a copy in the meanwhile).

    It seems the file "decypt-password.exe" creates a entry in c:/window/ trying to establish an internet connection using the standard procedure.

    Please keep your antivirus(es) updated!

    note: credits trojaner-info.de

    regards.

    paul
     
    Paul Wilders, Jul 15, 2002
    #1
  2. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,475
    Location:
    The Netherlands
    We have put a free Frethem Worm Remover up for download in the meanwhile. Those interested can grab a copy from our downloads page:

    www.wilders.org/downloads.htm

    note: credits Andreas Haak

    regards.

    paul
     
    Paul Wilders, Jul 16, 2002
    #2
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...