MS Windows Anti-Spyware Disabled by Spyware Trojan   - 2,651 Views,

Summary: Security firm Sophos is reporting today that a new spyware Trojan, BankAsh-A, is specifically targeting Microsoft's new anti-spyware, and very effectively so, it would seem. Once having disabled the anti-spyware, it sets about stealing passwords and other vital information, which it reports back to ...

Previous Article « Inboxes Engorged with Porn Spam
Read Next Article » Master Card Turns to SMS Messages to Combat Fraud

  Follow Anne on Twitter

Security firm Sophos is reporting today that a new spyware Trojan, BankAsh-A, is specifically targeting Microsoft’s new anti-spyware, and very effectively so, it would seem.

Once having disabled the anti-spyware, it sets about stealing passwords and other vital information, which it reports back to the mothership via ftp, and keeps tabs on what the computer’s user does (hence it being designated as spyware).

BankAsh-A completely disables the new Microsoft anti-spyware by, get this, simple deleting all of the files in the spyware program’s folder. It also deletes all of the anti-spyware’s registry entries.

Ouch.

Said Ken Dunham, Director of Malicious Code Intelligence (did any of us envision such job titles even ten years ago?) at iDefense, “While some smaller security firms are rightfully concerned about being pushed out of the market by a competitor as imposing as Microsoft, individual Windows users should also be worried.”

He added, “There are many implications. If they embed [security software] the way they did with Internet Explorer, it would be hard to lock down and make it secure because it’s integrated and it’s complicated.”

MS Windows Anti-Spyware Disabled by Spyware Trojan

 Follow Anne on Twitter

 Twitter Explained in Plain English

 Friend Anne on Facebook

Previous Article « Inboxes Engorged with Porn Spam
Read Next Article » Master Card Turns to SMS Messages to Combat Fraud

Read more:

»  Fake Windows W32.Sinnaka.a Alert Actually Front for Spy Trooper, World AntiSpy, PS Guard and Raze Spyware

»  Is Microsoft’s Anti-Spyware Really a Bootlegged Windows “Gotcha!”?

»  MySpace Ads Infect Millions with Spyware

»  Microsoft Offers Free Anti-Spyware to Windows Users

For additional similar stories check out our archives on Spyware & Adware

NOTE: We never, ever, ever will recommend any product or service on this site that we have not regularly used ourselves and do not wholeheartedly believe in. That said, in some cases after being very pleased with a product or service, we may enter into a relationship with the provider of that product or service such that if someone purchases that product or service based on our recommendation, we may get a small payment. Such payments go towards the upkeep of the Internet Patrol.

 

No Comments »

No comments yet.

RSS feed for comments on this post.

Leave a comment

Warning! All comments which contain URLs and are clearly just spam to generate a link back to the URL will be deleted on sight. Don't bother wasting your time!

If you are going to include a URL in your comment,
please keep it under 25 characters in length,
or use TinyURL to shorten it before including it in your comment.

Line and paragraph breaks are automatic, your email address is never displayed.
HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)


If you have not posted a comment here before, we apologize for having to ask you to enter the letters and numbers you see in the image above to validate your comment, but we are being attacked by thousands of comment form spams every day! You only need to do this once; once you have successfuly posted a comment here you will not be asked to do this again. Thank you for your understanding!

 
 This article first appeared on 2/10/2005
The Internet Patrol
Patrolling the Internet for You!