To print: Click here or Select File and then Print from your browser's menu

This story was printed from silicon.com, located at http://www.silicon.com/

Story URL: http://software.silicon.com/malware/0,3800003100,39124799,00.htm

Symantec issues warning about two-faced Trojan
It kills spyware, then attacks your security settings...

By Dan Ilett

Published: Thursday 07 October 2004

Symantec is warning Internet users of a Trojan horse that removes spyware but alters the security settings in computers.

While Downloader.Lunii eliminates a variety of adware programs -- often known as spyware -- the Trojan also tries to maliciously change the setup of Windows PCs and then downloads files from unknown Web sites.

Nigel Beighton, Symantec's director of enterprise strategy said: "It's common that a Trojan will try to change as much security as possible." "They often try to change Microsoft, Symantec and McAfee software. But so far we've hardly seen it."

Symantec rated classified Lunii as a low risk Trojan.

Trojan horses are often referred to as spyware because of their ability to stealthily run in the background of a computer without being detected. Anti-spam organisation Spamhaus recently warned that spyware has taken control over tens of thousands of networked computers. Spammers and hackers then use these 'zombies' to launch denial-of-service and spam attacks, the company said.

Last week the US government passed a bill to criminalise the act of altering PC configurations, taking control and downloading software onto a PC without the owner's consent.

Symantec has recommended users to switch off any unnecessary services - Windows functions such as printer and file sharing - and to keep security patches up to date.

Dan Ilett writes for ZDNet UK