All Threats

Viruses

Hackers

Spam

Whole site    Viruses
  
Virus Encyclopedia
Riskware
Alerts
Analysis
News
Glossary
Weblog

 
Archive

<< 2010  
Jan Feb  
     
     
     
About Diary's Authors
About Diary's Authors

The Analyst's Diary is a weblog maintained by virus analysts from Kaspersky Lab headed by Eugene Kaspersky. Find out more about the authors of this weblog.

Securelist Polls
How would you prefer to pay for your antivirus solution?
Using a prepay card
Via your mobile (SMS)
Via the Internet using a debit\ credit card
Using cash\ credit\ debit in a shop
Using an e-payment system (e.g. PayPal)
Other
  View responses
 

  Home / Weblog

Analyst's Diary

AdWare crosses the line


  Roel       December 16, 2004 | 12:51  GMT

comments (10)  

Malware has evolved a step further. AdWare has been compared to Trojan code for quite some time, but now we're seeing AdWare behaving like a file infector. This is something new.

A variant of the infamous CoolWebSearch family is infecting legitimate files in a way that when the infected file gets run, the AdWare file gets loaded too.

This means that you need to disinfect the legitimate file. If you delete the AdWare, but don't cure the file infection, this will cause problems.

It will be interesting to see how most Anti-Spyware programs will cope with this issue, as their engines aren't designed to disinfect executable files.

 

Copyright © 1996 - 2010
Kaspersky Lab
Industry-leading Antivirus Software
All rights reserved
 

Email: webmaster@viruslist.com