Email
Print
ShareMumbai: A trojan camouflaged as a free internet virus-protection software is spreading wildly online.
The Computer Emergency Response Team (Cert) of the Union ministry of information technology issued a warning about the trojan on its website (www.cert-in.org.in) on Thursday.
The Cert warning said: "It has been observed that Trojan:Win32/InternetAntivirus is circulating widely. It is a rogue security program that displays fake warning messages indicating that 'spyware or malware has been detected on the machine' in order to convince users to purchase rogue security software. It also impersonates Windows Security Centre."
The trojan is spreading under three names: Personal Antivirus, General Antivirus and Internet Antivirus Pro. Other aliases of the trojan that may form the subject line of an email attachment include: InternetAntivirus, not-a-virus:FraudTool:Win32.GeneralAntivirus and fraudtool.GeneralAntivirus.C (VirusBuster).
The trojan is usually installed by a downloader that has been distributed with the file name.
Internet users should exercise caution while opening email attachments and clicking on
links to web pages received from unknown sources. Web administrators can download up-to-date patches of the virus from the following websites.
http://www.microsoft.com/security/portal/Entry.aspx?name=
Trojan%3aWin32%2fInternetAntivirus
http://www.symantec.com/security_response/writeup.jsp?
docid=2008-081212-1113-99&tabid=3
http://www.sunbeltsecurity.com/ThreatDisplay.aspx?tid=
4127099&cs=2A9ECC22449CA28A04EE95B52F1732AE
