This Trojan is a modified Windows %System%\drivers\etc\hosts file, which is used to translate domain names (DNS) to IP addresses. The modified file is 2189 bytes in size. The file is modified in such a way as to block access to the sites listed below (the majory of which are antivirus sites and…

Related Posts

This entry was posted on Thursday, November 30th, 2006 at 6:39 am and is filed under Virus Threats.