[gui-talk] Fwd: Windows 7 "compatibility Checker' Is a Trojan

Steve Pattison srp at internode.on.net
Sat May 15 07:27:43 UTC 2010


From: Accessible Devices parker2745 at accessible-devices.com

Scammers are infecting computers with a Trojan horse program disguised as 
software that determines whether PCs are compatible with Windows 7.

The attack was first spotted by BitDefender on Sunday and is not yet 
widespread; the antivirus vendor is receiving reports of about three
installs per hour from its users in the U.S. But because the scam is
novel, it could end up infecting a lot of people, according to Catalin
Cosoi, the head of BitDefender's Online Threats Lab.

"This actually works because of the interest in Windows 7," he said.
The scammers steal their marketing text directly from Microsoft, which 
offers a legitimate in its Web site.

"Find out if your PC can run Windows 7," the e-mails read, echoing 
Microsoft's Web page. "This software scans your PC for potential issues
with your hardware, devices, and installed programs, and recommends what
to do before you upgrade."

Users who try to install the attached, zipped file end up with a back-door 
Trojan horse program on their computer. BitDefender identifies the
program as Trojan.Generic.3783603, the same one that's being used in a
campaign.

Once a victim has installed the software, criminals can pretty much do 
whatever they want on the PC, Cosoi said. That could mean installing a
keylogger to steal banking credentials or even gaining full access to
the hacked system.

Cosoi guesses that a few thousand people have been infected by the Trojan 
to date, but that number will probably grow rapidly as more victims are taken
in by the latest scam.

Regards Steve
Email:  srp at internode.on.net
MSN Messenger:  internetuser383 at hotmail.com
Skype:  steve1963
Twitter:  steve9782





More information about the GUI-Talk mailing list