Dont Be Conned By Conflicker.b Spam Trojan
You may use your computer for work, your child may use it for school
, and your friends may use them to keep in touch with each other. The reasons why our computers are important to us vary, but one thing all owners share is the need to protect their systems and their data. Ironically, it can be this need that develops into security issues. How? Trojans, such as the Conflicker.b spam Trojan, use the computer owners desire for protection in order to gain access to their systems. From there, they can usher in various forms of malware. What do you need to know about Conflicker.b?
Identifying the Conflicker.b Spam Trojan
The warning to avoid emails we get from unknown addresses is familiar, as is the warning not to open attachments on such emails. But what if the emails appear to come from a legitimate and trusted source? Conflicker.b, also known as the Downadup worm, is a Trojan which disguises itself as a spyware scan program from Microsoft. This is the second stage of the Conflicker worm; during the first stage, it simply entered computer systems and remained dormant. Now activated, it is able to promote rogue antivirus programs, such as Antivirus Pro 2010.
Owners will receive an email that appears to have come directly from Microsoft. It informs them that their system is infected with the Conflicker worm and is at risk. The reader is then given the option to run the free spyware scan provided by Microsoft in order to prevent the spread of this infection.
Does the reader of such an email actually receive protection from this scan? No. In fact, they inadvertently allow the Conflicker.b spam Trojan into their systems. It brings various forms of malware, most noticeably the rogue antivirus program, Antivirus Pro 2010, with it.
The key to avoiding this Trojan is to know what it looks like and how you can identify it in the future. The message reads as follows:
Subject: Conflicker.B Infection Alert
Message:
Dear Microsoft Customer,
Starting 18/10/2009 the Conflicker worm began infecting Microsoft customers unusually rapidly. Microsoft has been advised by your Internet provider that your network is infected.
To counteract further spread we advise removing the infection using an antispyware program. We are supplying all effected [sic] Windows Users with a free system scan in order to clean any files infected by the virus.
Please install the attached file to start scan. The process takes under a minute and will prevent your files from being compromised. We appreciate your prompt cooperation.
Regards,
Microsoft Windows Agent #2 (Hollis)
Microsoft Windows Computer Safety Division
It uses the Microsoft name several times, thus giving itself an illusion of legitimacy. It also names the Conflicker worm, which people may have heard about in the news. But you can easily tell that it is a false message. How? Because Microsoft will not send such messages. It is that easy; they do not send them, so this has to be false. Further, how would Microsoft have obtained your email address? Conflicker.b counts on people reacting before considering why the message does not make sense. If you see this message, make sure to mark it as spam and delete it.
What Happens if the Conflicker Spam Trojan Does Gain Access?
Because Conflicker.b exploits peoples concern for security, many people do opt to run the free system scan. When this happens, a file called Install.exe will open. This application changes your security settings in order to allow risky files to be opened. Normally, your security program will block sites or files that are potentially corrupt. When Conflicker.b is present, these files can run.
Remember that the goal of such malware is to create the illusion that there are several serious security risks and that the computer owner needs to immediately purchase protection. To do this, Conflicker.b creates false warning messages like the following:
Your computer is infected!
Windows has detected spyware infection!
It is recomended to use [sic] special antispyware tools to pervent [sic] data loss. Windows will now download and install the most up-to-date antispyware for you. Click here to protect your computer from spyware!
Again, it appears legitimate because it uses the Windows name and comes from your taskbar. But if you take a moment, you can spot several signs that it is not from a legitimate program. There are multiple exclamation points, which is not characteristic of a legitimate program because they do not seek to create drama or create panic. You will also notice that there are spelling mistakes and syntactical errors that would not be present in a legitimate warning.
The Conflicker.b spam Trojan carries in malware, specifically Antivirus Pro 2010, a rogue antivirus program. This program creates separate issues that you will notice. Pop-ups, slow computer performance, new system tray icons and desktop shortcuts, and hijacked homepages and browser settings are common.
There are different varieties of rogue antivirus programs, but the goal is the same. Antivirus Pro 2010 and others in this class want to convince computer users that there are serious threats to their systems that can only be resolved using Antivirus Pro 2010. This rogue program creates the pop-ups, false warning scans, and other noticeable signs to create the appearance of security threats. In reality, however, it is likely that you only have one issue with your computer: that Conflicker.b has brought in Antivirus Pro 2010.
Downloading the Antivirus Pro 2010 software does not provide protection. Programs like this cannot even scan your computer. They do nothing to detect and remove threats. If Conflicker.b and/or Antivirus Pro 2010 remain in your system, it can open the door to other forms of malware. Because both can reconfigure your security settings, your system is more vulnerable to malware.
To keep your computer running smoothly, it is important to remove the Conflicker.b spam Trojan as soon as you realize it is present in your computer. And always delete messages (without opening them if possible) that come from unfamiliar sources. If you do open them, never click on the links or download the attachments.
by: Ms Mindy Matter
Runtime Error 1743 - Get Help Here ! Msvcrt Dll Error In XP - Get Help Here ! Runtime Error 1515 - Rid Of Pc Errors ! Runtime Error 1916 - Anyone Can Fix It ! Sim card SMS recovery software restores contact name, numbers and text messages Best Spyware Software - Why Selecting The Best Spyware Software Can Be Difficult Runtime Error 2117 - Is It Fixable ? Runtime Error 1514 - Fix It ! How To Play Any Dvd And Video On Your Blackberry? Password Encryption Of Pdf Files Going Green With Portable Document Format How To Prepare Your Online Store For Christmas The Best Forex Trading Software