Mundo descargas

Mensajes: 90 · Registrado: 28 Oct 2005 Mensajes: 90

Troyano en crack de Windows Vist

Ahora que Windows Vista corre alegremente por las redes P2P, algunos hasta se atreven con los correspondientes cracks que prometen ponerlo “a punto”.

Precauciones, porque se ha informado de que uno de los cracks para Vista más difundidos (denominado Windows Vista All Versions Activation 21.11.06″) incorpora Trojan-PSW.Win32.LdPinch, un “simpático” troyano, que se dedica a recolectar contraseñas y enviarlas por correo a su creador

Trojan-PSW.Win32.LdPinch :
This family of Trojans steals user passwords.

When launching, the Trojan writes the following value to the system registry.

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
putil = %windir%\%file name%
This ensures that the Trojan will be run every time the system is started.

It then copies itself to the Windows folder, and launches itself from there, deleting the original file.

The Trojan harvests information about the system (operating system, configuration etc.) and passwords for a range of services and applications, including RAS, POP3, IMAP, ICQ, FTP etc.

The information collected is encoded using MIME (Base64) and sent to the Trojan's author by email, using an SMTP server with an IP address which is coded in the Trojan's body.