This Trojan is a modified Windows %System%\drivers\etc\hosts file, which is used to translate domain names (DNS) to IP addresses. The modified file is 910 bytes in size. The file is modified in such a way as to prevent the user from viewing the sites listed below.
The following strings are added to…

Related Posts

This entry was posted on Wednesday, April 18th, 2007 at 6:42 am and is filed under Virus Threats.