 |
 Trojan Horses: How Can I Get Infected?
by Dancho Danchev
the author of "The Complete Windows Trojans Paper".
Via IRC
Here are several scenarios of you getting infected while using IRC:
- You're talking with someone, a "girl" probably, have great time and, of course, you want to see the person you're talking to. You ask for a picture or the "girl" offers you her pictures and I'm sure you'll definitely want to see them. The "girl" says that she has just created her first screensaver, using some known free or commercial software to do this, and offers it to you, but how about if "she" mentions several pictures are naked ones?! You have been talking to "her" for a week or so, you get this screensaver.exe, you run it and, yeah, VERY nice pics, some are naked and she didn't lie to you so nothing bad or suspicious has happened BUT think again what really has happened!
- Trojan.exe could also be renamed into Trojan.scr like a screensaver extension and will again run properly when you execute it so pay attention about these file extensions.
- Trojan.exe is being renamed like Trojan....(150 spaces).txt.exe you'll get the file over IRC in the DCC it will appear as .TXT and you won't get worried about anything, run it and get yourself infected again. In all of these examples the icon of the file is changed, of course, because it needs to be the same icon as a normal .TXT and this fools victims very often.
Most people don't notice in their Explorer that the Type of the file is Application BUT with a .TXT icon. So BEFORE you run something, even if it's with a .TXT icon, check its extension and make sure it's really a text file.
Previous | 1 | 2 | 3 | 4 | 5 | 6 | Next
|
|
