Quick Links: SpywareGuide Greynets Blog | SpywareGuide Product Database | SpywareGuide Company Database | SpywareGuide Categories
SpywareGuide powered by FaceTime Security Labs
Search SpywareGuide Greynets Database & Site
Security Email Alerts & Updates
Search the Blog
 
Recent Posts
Categories
Monthly Blog Archives
Links
Subscribe
Subscribe to this blog's feed
About the Blog
About SpywareGuide Greynets Blog
Link to Us
Link to SpywareGuide.com

« Problem With Windows Live ID Fixed | Main | GTA: Hoodlife - Virus Attack is a Public Enemy »

  • Pornoplayer installed from fake Windows Codec

There are several ways modern spyware is infecting unsuspecting systems these days. The most common is still the method of bundling malware into trojans so that the user has as little to do with the installation process as possible. Downloader-ADV is a very large series of Trojan downloaders designed to cripple a machine with adware, password crackers, spyware, and other malware. One instance of Downloader-ADV, innocently named loader.exe, drops a pornography media player under the guise of a perfectly legitimate Windows codec. The name of this player is appropriately named, Pornoplayer.

Upon installing loader.exe, it will phone home to kozirodstwo.com. You may recognize this site for such infamous hits as PWS-Pinch and Agent-ECM. You are then directed to a pornography site called porn-party.net.

codec.png

This site pushes on the user a seemingly legitimate codec from Microsoft.

screenie.png

This is actually an installer for Pornoplayer!

pornoeula.png

Other files are also installed along with the Downloader-ADV/Pornoplayer combo. Research also points to pornstar-photos.com installing another part of the Trojan downloader as well as being redirected to rones.porn-host.org. This site is a warehouse for pornography that installs ICOO products.

  • TrackBack

TrackBack URL for this entry:
http://blog.spywareguide.com/mt/mt-tb.cgi/181

Listed below are links to weblogs that reference Pornoplayer installed from fake Windows Codec:

» Klonopin side effects. from Xanax with klonopin.
Klonopin social anxiety. Intravenous klonopin. Shootin up klonopin. Klonopin. Snorting klonopin. Lethal dose klonopin. [Read More]

» Prescription somas at pricing of 19.99. from Somas do they have codine in them.
Somas. [Read More]


Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)


Site EULA | Site Map | Contact Us | About Us | Site and Spyware FAQ | Advertise | RSS Feeds  | Link To Us | SpywareGuide JapanJapanese

© Copyright 2006, FaceTime Communications, Inc. All rights reserved.