Trojan Installs Anti-Virus, Removes Other Malware

[TopHosts NewsMan]

An anonymous reader writes "SpamThru takes the game to a new level. The new virus uses an anti-virus engine to remove potential 'rival' infectious code." From the article: "At start-up, the Trojan requests and loads a DLL from the author's command-and-control server. This then downloads a pirated copy of Kaspersky AntiVirus for WinGate into a concealed directory on the infected system. It patches the license signature check in-memory in the Kaspersky DLL to avoid having Kaspersky refuse to run due to an invalid or expired license, Stewart said. Ten minutes after the download of the DLL, it begins to scan the system for malware, skipping files which it detects are part of its own installation."



Link To Original Article

[andyramos]

The best antivirus is one I use Norton. I read a magazine Chip, which deals with computer and in a region, he showed that Norton antivirus is the best because it is very easy to install and very good, you can request to train the person you buy as antivirus and they will also tell you that Norton antivirus is the most preferable.