This Trojan is a modified Windows %System%\drivers\etc\hosts file, which is used to translate domain names (DNS) to IP addresses. The modified file is 1240 bytes in size. The file is modified in such a way as to prevent the user from viewing the sites listed below.
The following strings are added…

Related Posts

This entry was posted on Friday, March 2nd, 2007 at 2:05 am and is filed under Virus Threats.