|
IeHook Spyware Information
| Name: |
IeHook |
| Category: |
Spyware |
| Advice: |
Remove |
| Risk: |
Elevated Risk
Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. |
| Description:
|
This is a password stealing trojan that records HTTPS related information to local file.
The information is sent to author via SMTP mail. Online bank account information (username/password) is particularly vulnerable to this threat.
The dll is loaded when Internet Explorer is run. The dll monitors IE contents and writes HTTPS related information to a local file. The file name is randomly generated with extension .hrptf. The file can be sent via SMTP mail.
This trojan possibly takes advantage of the ASN.1 exploit.
|
| Signatures:
|
process: ~bang.exe: MD5 Hash: .. |
| Type: |
Spyware - Spyware's primary purpose is to collect demographic and usage information from your computer, usually for advertising purposes. Spyware usually that 'sneaks' onto a system or performs other activities hidden to the user. Spyware programs are usually bundled as a hidden component and downloaded from the Internet. These modules are almost always installed on the system secretively and try to run secretively as well. |
Top Spyware Visited Pages:
IEPlugin - Alias: IMIServer IEPlugin, Webplugin, BHO3Lib, ExplWWW, IExpl, MimarSinan, Win Server, winobject, TrojanDow - 81 visits
webHancer - Alias: Customer Companion, Webhancer Customer Companion, SpeedRank - 52 visits
Spyware.SearchAssistant - Alias: Troj/StartPa-EI - 48 visits
007.msnnames - Alias: access.ocx, jokes.ocx, StopLiteCtrl, StopLite, 007installer - 43 visits
PowerReg Scheduler - 43 visits
Aureate - Alias: Aureate Spy, Radiate - 39 visits
VX2.LocalNRD - Alias: LocalNRD - 37 visits
CWS.Cassandra - 35 visits
C2.Lop - Alias: C2 Media, Lop, LopAdvert, MP3Search, MpAdvert, TrojanClicker.Win32.Rotarran - 34 visits
Stealth Web Page Recorder v. 1.1 - 31 visits
Random Spyware Pages:
Aureate - Alias: Aureate Spy, Radiate
ATPartners
AlwaysUpdateNews - Alias: SoftTech
Unclassified.Spyware.abu
Unclassified.Trojan.H
Spyware.Winpipe
Spyware.Startup.Tmp
Foxxweb.HomepageProtector - Alias: Foxxweb
Unclassified.Spyware.19
Unclassified.Spyware.61
|
