premi123
09-29-2010, 02:48 PM
ZEUS Banking Trojan
ZEUS is easily and commonly dropped by an exploit and is also carried
via social engineering techniques exploiting job sites and the like. The
ZEUS Trojan, or the ZEUS Banking Trojan can also be referred to by
security firms as WSNPOEM and Gorhax.
Outwardly, a ZEUS infected PC will show no obvious signs of infection.
The ZEUS Banking Trojan is capable of rifling your Internet cache for
stored login and password credentials, it can also eavesdrop on
keystrokes and screen contents and can even modify a web page with
form injection to capture additional fields - just in case what the
criminals want to steal isn't already on the page.
Do a system search.
Start>search>for files and folders
All files and folders in (C:)
Copy and paste this string into "all or part of the filename".
NTOS.EXE, LD08.EXE, LD12.EXE, PP06.EXE, PP08.EXE, SRA64.EXE, LDnn.EXE, PPnn.EXE
Also look for a folder with the name .. WSNPOEM
Do not assume because your antivirus or internet security suite does
not show any signs of infection, that your PC does not have the ZEUS
Trojan infection.
If you don't have any of these files on board,
you can feel fairly safe, but do this scan on
a regular basis.
KEEP SAFE GUYS !!
FROM
www.worldsat-forum.com
ZEUS is easily and commonly dropped by an exploit and is also carried
via social engineering techniques exploiting job sites and the like. The
ZEUS Trojan, or the ZEUS Banking Trojan can also be referred to by
security firms as WSNPOEM and Gorhax.
Outwardly, a ZEUS infected PC will show no obvious signs of infection.
The ZEUS Banking Trojan is capable of rifling your Internet cache for
stored login and password credentials, it can also eavesdrop on
keystrokes and screen contents and can even modify a web page with
form injection to capture additional fields - just in case what the
criminals want to steal isn't already on the page.
Do a system search.
Start>search>for files and folders
All files and folders in (C:)
Copy and paste this string into "all or part of the filename".
NTOS.EXE, LD08.EXE, LD12.EXE, PP06.EXE, PP08.EXE, SRA64.EXE, LDnn.EXE, PPnn.EXE
Also look for a folder with the name .. WSNPOEM
Do not assume because your antivirus or internet security suite does
not show any signs of infection, that your PC does not have the ZEUS
Trojan infection.
If you don't have any of these files on board,
you can feel fairly safe, but do this scan on
a regular basis.
KEEP SAFE GUYS !!
FROM
www.worldsat-forum.com