New Trojan Mocks You

This is a very unique Trojan. Not only does it delete computer files, but also makes fun of users. Meanwhile, it does everything necessary to make it impossible to stop its actions," explains Luis Corrons, Technical Director of PandaLabs.

HT

[Canuckistan]

My Trojan mocks me, too.

We are talking condoms, right?

[erwins]

You expect me to click on a link called "this is a very unique Trojan"? I'm not that gullible...

erwins

[imjustasteph]

Originally Posted by erwins

You expect me to click on a link called "this is a very unique Trojan"? I'm not that gullible...

erwins

My thoughts exactly. I just figured I'd read what everyone else had to say.....but I notice there's not a lot of commentary. Hmm. Maybe no one else felt safe clicking that either?

[BluesScale]

Maybe they are all rebuilding their systems after clicking the link.

The article describes a Peer to Peer spread malware that trashes the hard drive and uses the speech API to mock the user. The malware is referred to as BotVoice.A or Win32\Hira.A

It appears to be wholly malicious with no commercial purpose. It is also not spreadable except by social engineering ("Here, run this)

You can listen to a recording of the voice here

It is not a common malware at this stage and given the lack of a vector to spread, I doubt that it will become one

Blues

Originally Posted by imjustasteph

My thoughts exactly. I just figured I'd read what everyone else had to say.....but I notice there's not a lot of commentary. Hmm. Maybe no one else felt safe clicking that either?

I made a poor choice with the link text (It was late...I may have been drinking) Nothing wrong with being cautious. Here's the article verbatum:

"You have been infected I repeat you have been infected and your system files have been deleted -- Sorry, have a nice day and bye bye."


If your computer starts talking to you and tells you that you are infected and your files have been deleted, it's no joke, you have just been infected by the BotVoice.A Trojan.



This new malicious code detected by PandaLabs last week uses the Windows text reader to play the following sentences:



You have been infected I repeat you have been infected and your system files have been deleted. Sorry. Have a nice day and bye bye.


These comments are repeated over and over again while the Trojan tries to delete the entire content of the computer's hard disk. Sometimes, BotVoice.A might not manage to delete all of the system files. However, this doesn't prevent it from rendering computers unusable as it modifies the Windows registry so that none of the programs installed on the computer nor the task manager can be run. It also disables the Windows registry editor in order to safeguard its malicious actions.



"This is a very unique Trojan. Not only does it delete computer files, but also makes fun of users. Meanwhile, it does everything necessary to make it impossible to stop its actions," explains Luis Corrons, Technical Director of PandaLabs.



This Trojan uses the usual means of propagation: P2P networks, physical storage devices, such as USB memory sticks, floppy disks or CD-ROMs, and downloads performed by other malware or from malicious web pages, etc. In cases of a new and previously unknown Trojan like BotVoice.A, the infection will not be prevented by traditional antivirus software which relies primarily on signature files of known malware.

HT

[Morning]

Originally Posted by BluesScale

Maybe they are all rebuilding their systems after clicking the link.

The article describes a Peer to Peer spread malware that trashes the hard drive and uses the speech API to mock the user. The malware is referred to as BotVoice.A or Win32\Hira.A

*snip*

It is not a common malware at this stage and given the lack of a vector to spread, I doubt that it will become one

Blues

BluesScale, I just wanted to let you know that it's really nice of you to share your knowledge in this and other threads.

You're cool.

Morning

[BluesScale]

:Blush:

Thank you very much, Morning. I just try to help out a little when I can.

Commercial malware is big business and the proceeds support organised crime and increasingly, terrorism. If I can make a small dent in their operations, then that is all to the good.

Blues

[Spam & Cookies-mmm]

Originally Posted by BluesScale

The article describes a Peer to Peer spread malware that trashes the hard drive and uses the speech API to mock the user. The malware is referred to as BotVoice.A or Win32\Hira.A

It appears to be wholly malicious with no commercial purpose. It is also not spreadable except by social engineering ("Here, run this)

You can listen to a recording of the voice here

Scary. I've had nightmares about viruses that do just that. The voice sounded very similar too.

[diddy]

Originally Posted by Canuckistan

My Trojan mocks me, too.

We are talking condoms, right?

Canuck, If you think you're trojans are mocking you Might I recommend a good therapist for that problem? Delusions of grandeur, displacement, auditory hallucinations... Mind you what is being said is probably true....

*Runs away from Canucks taking Trojans in fear*
did "Protective little bastards aren't they?" dy