Sexy Space is the latest Trojan, which has been identified in three different Chinese Companies as they are being affected. Malware defence company F-Secure has identified this Trojan. This virus is spread through the Symbian Foundation digital signing process and it spreads itself by text message.
This Trojan lets attackers send a link via text messages, which are able to download worm, then the virus can send similar text messages to all of your contacts.

Want to check that your anti virus is working proper or not ?

Besides, F-Secure says, that this is the first identified virus and it blames, and blames XiaMen Jinlonghuatian Technology, ShenZhen ChenGuangWuXian Technology, and XinZhongLi TianJin for its creation.
Despite it has not reached wider, few reports say that its existence is in China and Middle East. The target of the virus is all Symbian S60 phones.

More

D-Link is adding captcha support to its line of home routers. While default password lists have been abundant for many years, it was only recently that we started seeing the them implemented in malware. Last year, zlob variants started logging into routers and changing their DNS settings. It’s an interesting situation since the people who need the captcha feature are the ones who will never see it, since they won’t log in to change the default password.

[photo: fbz]

Ten cały konflikt pokoleń to mocno przereklamowana sprawa.

***

Ledwo ze skorupki pokażą czub, już hop-siup
Drą pisklęta dziób, że każdy dorosły – to żłób!
A gdy już im włos siwieje, to w głos z głębi płuc
Starcy charczą w krąg, że każdy, kto młody – ten buc!

Ja, człek niemłody i niestary,
Słów na ten temat miałbym parę:

Tu czas i wiek nie ma znaczenia,
Jak ktoś jest żłób – będzie żłób!
W młodości dniach czy w smudze cienia,
Jak ktoś jest żłób – będzie żłób!
Dogada się, proszę kolegi,
Stary wał i debiutant wał,
Żłób, co zna niegdysiejsze śniegi
I żłób-żółtodziób na schwał!

Młody żłobie mój, co wśród pał i dwój w ławce trwasz,
Nie przecz, proszę, oj, że za wała ojczulka masz!
Stary bucu, hej, i ty wardze swej zadaj trud,
By wyznała to, że każdy, kto młody – ten fiut!

Ja, człek niemłody i niestary,
Słów na ten temat miałbym parę:

A, co bym miał – tak myślę sobie:
Jak ktoś jest żłób – będzie żłób!
Bez żłobu, czy przy wspólnym żłobie,
Jak ktoś jest żłób – będzie żłób!
Dogada się – proszę Kolegi -
Stary wał i debiutant wał,
Żłób, co zna niegdysiejsze śniegi
I żłób-żółtodziób na schwał!

I jeszcze bis – proszę uprzejmie:
Jak ktoś jest żłób – będzie żłób!
W powiecie, czy w Wysokim Sejmie,
Jak ktoś jest żłób – będzie żłób!
Więc wsłuchaj się w sens naszych rymów,
Myśli zbierz i uwagę zdwój:
A teraz dość tych pseudonimów!
Jak ktoś jest…

I do want you to know that it is April 4, 2009 and the only thing that changed that is that the worm Conficker.C code base has changed. Also the servers that the worm connects to are open and not sending data yet so now it will be a waiting game now of what will it do next! This was said on “Security Now” a show hosted by Steve Gibson at grc.com. This worm is a very crafty viris that is out there now. If you want more info about this virus or how to remove it go to my post at

Conficker Worm PANIC on April 1, 2009.

Remember any computer that is comprimized by a virus, spyware, worm, or any type of mallisious code/program. If you remove it you can never say it is safe again because it was comprimized and remember if you were a hacker would you put a backdoor?

We hear all this talk about the worm called Conficker, also known as ZLOB, Downup, Downadup and Kido in the news latly. The worm is occuping approximately six percent of computers scanned by Panda Security are currently infected by the worm. In the news people are scared and it is like the blaster worm all over again. Well people found out their is a date ingrained in the worm that it is set to receve a set of instructions from the new programmer of the virus. This worm is exploiting the auto run feature in windows (all of it, Network shares, Pen drives, CD Drives, etc…). Also It has a warnning on Microsofts site at http://support.microsoft.com/kb/962007 about the worm. Also I found a link that talks about it at http://www.tinyurl.com/Confickerinfo and also on wikipedia at http://en.wikipedia.org/wiki/Conficker This worm finds a port that is open on your pc and gets in and or it uses vanribilities in programs to gain access. To advoid it is to turn auto run COMPLETLY OFF and keep programs upto date like Adobe readder, Windows etc… Windows has a security patch that semi fixes auto run but not really. It is only available in Vista and Server 2008. But I seen one for XP But I forget what it is called something like auto run patch, or something like that. Well I hope you scann your PC’s on April 1 2009, I know I will on my windows baced PC’s and friends/Family PC’s. Keep upto date and scan with everything you got. I give everyone the best of luck and keep safe online and off. Talk to you all next time!

More info and tools to try to remove it from Microsoft go to: http://www.microsoft.com/protect/computer/viruses/worms/conficker.mspx#EUB

Or try this removal method

To Remove it try this (found at http://www.xp-vista.com/spyware-removal/zlob-removal-instructions )

NOT RECOMMENDED TO USE:  SpyHunter* Spyware Detection Utility. Like They say on the site use my method in my post called

The Guide to Locking Down a PC

Stop Zlob Processes:
(Learn how to stop a process)
nvctrl.exe
msmsgs.exe

Unregister Zlob DLL Files:
(Learn how to do this)
oyopu.dll
yronl.dll
isadd.dll
pkgvyg.dll
qzviz.dll
Ygjun.dll
yuspej.dll
czxtyx.dll
bpvol.dll
splug.dll
dxovx.dll
lcsrsrv.dll
iesplg.dll (new)
iesbpl.dll (new)
vzfhprk.dll (new)
hymww.dll (new)

Remove Zlob Registry Values:
(Learn how to delete a registry value)
Software\Microsoft\Windows \CurrentVersion \Explorer\SharedTaskScheduler\{aed6f6a3-183c-488d-9f90-23db99f56e7f}
Software\Microsoft\Windows \CurrentVersion \Explorer\SharedTaskScheduler\{634be415-da12-496b-b89e-329b73c4807f}
Software\Microsoft\Windows \CurrentVersion \Explorer\SharedTaskScheduler\{8329660f-e248-4872-98cc-fb9c4fec7ba8}
SOFTWARE\MICROSOFT\Windows \CURRENTVersion \POLICIES\EXPLORER\RUN\C:\Windows \System32\issrch.exe
SOFTWARE\Microsoft\Windows \CurrentVersion \Explorer\SharedTaskScheduler\{2016a466-91a2-43c6-97d8-2fd380f065ef}

Find and Delete these Zlob Files:
(Learn how to do this)
Trojan.Zlob.D
nvctrl.exe
msmsgs.exe
Trojan.Zlob
hp[X].tmp
msvol.tlb
ncompat.tlb
RSA
Protect
vnp7s.net
zxserv0.com
dumpserv.com
oyopu.dll
yronl.dll
isadd.dll
pmsnrr.exe
pmmnt.exe
isamntr.exe
avD.exe
codecaddon1169[1].exe
pkgvyg.dll
qzviz.dll
Ygjun.dll
yuspej.dll
czxtyx.dll
bpvol.dll
splug.dll
dxovx.dll
lcsrsrv.dll
iesplg.dll (new)
iesbpl.dll (new)
vzfhprk.dll (new)
hymww.dll (new)

If you are anything like me, you will have already come across this name, Zlob, many times before.
On my daily search for new and improved ways to ensure my computer remains safe and secure, I am constantly coming lob.

So, what is this Zlob?

Zlob, as like many other Trojan applications, is the rather dangerous for any computer it has infiltrated. Once installed, Trojan Zlob will create a backdoor exploit which will give malicious users access to the computer it has embedded itself within.

Translation:  anonymous users will be able to login to your computer and access all the private information, including secret files or bank accounts, present on the computer system.

Trojan Zlob tends to install other malicious applications, like Key loggers (which log all keystrokes made), or Adware applications (which would show various types of advertisements).

The advertisements affiliated with Zlob may disturb your work and noticeably slow down the internet connection of the infiltrated computer system. By now it is quite a well-known fact that Trojan applications tend to slow down a computer’s performance as well, and Trojan Zlob is no exception.

Trojan Zlob operates similarly to various Rogue Anti-Spyware applications, which use aggressive tactics to scare and coerce users into purchasing a license of their fake programs.

It is very important to check that your computer has not been infected with Zlob.

To be sure, you should go to: http://www.pcthreat.com/parasitebyid-6532en.html. Here you will be able to download the FREE Zlob infection scanner, and will also be provided with detailed instructions on how to remove this parasite and all its components.

Remember – computer safety, first!

MS Antispyware 2009 is another so called antispyware software that pretend to be all-in-one security application that will protect your data and privacy. But in fact it is another fake program. MS Antispyware 2009 use two ways to get onto your computer : misleading websites and Trojan horses. In both ways you will be flooded with numerous pop-ups stating that your computer is seriously infected with different spyware and malware. Once you click on that ads you will be redirected to MS Antispyware 2009 download page. But remember, MS Antispyware 2009 is developed with one aim – to trick computer user into purchasing full version of MS Antispyware 2009, which in fact is useless and can download and install more and more malware and spyware.
We strongly recommend you to remove MS Antispyware 2009 as soon as possible using SpywareDoctor + antivirus.

Download SpywareDoctor + antivirus to remove MS Antispyware 2009

Privacy Commander is a rogue pc security program that pretend to be a registry cleaner. But in fact it’s another scam software. Privacy Commander will install itself with a help of Trojan horse or misleading web sites. Once installed it will generate fake security alerts, annoying pop-ups to scare computer users, and lure them into buying full version of Privacy Commander. Also Privacy Commander can install more malware on your computer, hijack your web browser.
We strongly recommend you to remove Privacy Commander using SpywareDoctor + antivirus.

Download SpywareDoctor + antivirus to remove Privacy Commander

Nano Antivirus is the latest rogue anti-spyware program, successor of well known Pro Antispyware 2009. Nano Antivirus may be installed from misleading web sites or with help of Trojan horse. In both cases you will be informed that your computer is infected with different types of spyware and malware, and popup messages will “advice” to download and install Nano Antivirus. Once installed Nano Antivirus will configure itself to run automatical security scan every time you turn on your computer. Results of that scans could be frightening . But don’t fall in trap, that results are completely fake, and made with one purpose – trick computer users into buying full version of Nano Antivirus which in fact don’t remove any threats.
We recommend to remove Nano Antivirus with a help of SpywareDoctor + antivirus.

Download SpywareDoctor + antivirus to remove Nano Antivirus

SecureExpertCleaner also known as Secure Expert Cleaner is latest fake anti-spyware application. SecureExpertCleaner usually installed itself onto your computer without any notification or permission, through misleading sites, Trojan horses, fake software. Once SecureExpertCleaner is installed onto your computer it will perform security scan and than list variety of dangerous threats, show fake security alerts to trick computer users into buying paid version of SecureExpertCleaner, in order to remove all threats and protect your data and privacy. In reality SecureExpertCleaner can dramatically slow your computer, put your privacy and data in risk.
So we advise you to remove SecureExpertCleaner as soon as possible using SpywareDoctor + antivirus.

Download SpywareDoctor + antivirus to remove SecureExpertCleaner

XP Protection Center is a new counterfeit security software, successor of well known AntiSpywareXP 2009. Remember that XP Protection Center have no relation to Windows XP operating system and Microsoft corporation.
This program pretends to be anti-spyware program that should remove all threats and protect your privacy and data, but you shouldn’t trust this. Legitimate and functional programs don’t promote itself through Trojans and misleading sites that displays fake security alerts. XP Protection Center will find real malware, but only malware that was installed by XP Protection Center before. Also it can easily hijack your web browser and redirect it to websites that sell malware, or show fake warnings while you surf the web.
So don’t fall in trap, don’t purchase XP Protection Center, remove it as soon as possible using SpywareDoctor + antivirus.

Download SpywareDoctor + antivirus to remove XP Protection Center

SpywareRemover 2009 is a new rogue anti-spyware program, clone of well known Spyware Remover and VirusRemover software. It uses Zlob or Vundo Trojans to install itself on your computer without any permission. Once SpywareRemover 2009 is installed it will perform fake security scan and find a lot of threats. But don’t trust SpywareRemover 2009 results, these threats are fake or dont exist. This is the way developers try to scare you and trick into buying licensed version of SpywareRemover 2009 for about 50$. But in fact you’ll get nothing but a piece of useless software. Moreover SpywareRemover 2009 can easily damage some system files, making your system vulnerable to other threats. So we strongly recommend you to remove SpywareRemover 2009 as soon as possible using SpywareDoctor + antivirus .

Download SpywareDoctor + antivirus to remove SpywareRemover 2009

I have never quite understood the majority of virus and Trojans – who would write them and why? I guess it’s sort of internet graffiti; the odd one may be beautifully done as long as it’s not on the side of your house, the rest are just shit.

Anyway, a couple of days ago on a PC at home, I noticed that any google search would show results as normal, but without ads. The problems became clear when I clicked on any result. Instead of loading the page that I wanted, I kept getting spurious search and advertising sites. I did all the usual stuff – checked my virus software was up to date but still the problem remained. I then noticed that another machine was experiencing the same problem and again I did the usual checks, but to no avail. After speaking to our office IT support, again no help, I decided to check the 3rd & 4th computers at home – all had the same problem. Logic was now telling me that it had to be the router, even though I had been assured by IT that this could not be affected….how wrong they were.

It turned out to be a simple problem. A piece of malware had got onto one of my machines and had ran through a bunch of default user name & passwords for routers. It got lucky with mine because like most people I kept the factory defaults, even though I took the trouble of encrypting connections. It then changed the DNS settings to route all internet traffic through the dodgy servers, still giving me internet access but sending me off all over the place with searches. I changed the default password and set the DNS back to ‘assigned by ISP’ then rebooted the router and everything was fixed.

Another article, another fake anti-spyware program. Today our “hero” is XP Antivirus 2008 , one of latest type of so-called “counterfeit antispyware”. So, after downloading new video codec, or visiting shady web-sites, your computer may become infected by trojan horses that promote XP Antivirus 2008 showing fake security warnings and redirecting you to misleading web-sites. During installation of XP Antivirus 2008, you won’t get information about developer, contacts, refunds etc. Than XP Antivirus 2008 will scan your computer for spyware and issue fake security alert and detection report. And to delete all that stuff you must purchase full version of XP Antivirus 2008 for about 50 $.
But remember that results of XP Antivirus 2008 scans are completely fake. So don’t lose your time, remove XP Antivirus 2008 using our automatical removal tool.

Download SpywareDoctor + antivirus to remove XP Antivirus 2008

Eine neu entdeckte Abwandlung des Trojaners Zlob kann die “Domain Name Systems” vieler aktueller Router verändern und so jeglichen Internetverkehr auf die Seite des Angreifers umleiten. Hierbei ist der Trojaner mit einer Liste der Router-IPs und Werks-Passwörter aktueller Routermodelle ausgestattet und kann so in viele schlecht konfigurierte Router eindringen. Die Forscher von Sunbelt Software haben beobachtet, dass die neue Variante von Zlob erfolgreich die DNS-Einstellungen in einem Linksys-Router und einem Modell von Buffalo mit der Open-Source-Firmware DD-WRT manipuliert hat.

Zlob ist einer der häufigsten Trojaner für Windows, welcher in unzähligen Abwandlungen auftreten kann. Die Nutzerstatistiken des Windows-Tool zum Entfernen bösartiger Software besagt, dass in der zweiten Jahreshälfte 2007 mehr als 14,3 Millionen Zlob-Infektionen beseitigt wurden.

Die Gefahr ist, dass Zlob zwar von aktueller Antivirensoftware entdeckt und entfernt werden kann, die Änderungen im Router kann aber nicht von der Software rückgangig gemacht werden. Außerdem reicht ein infizierter Computer im Netzwerk um den ganzen Internetverkehr aller am Router hängenden Geräte umzuleiten.

Ein einfacher aber wirksamer Schutz ist es, die Router-IP, den Standart Benutzernamen und das Routerpasswort zu ändern und so die Liste der Zlob-Variante zu umgehen. Wie man diese einstellungen ändert, hängt vom Router ab, es wird aber in der Regel im Handbuch des Routers beschrieben und ist leicht über eine Browseroberfläche zu erledigen.

The Zlob trojan was first found in 2005. Its a nasty trojan that infects your computer and can download and install other spyware programs without your consent.

Zlob can also install some of the worst spyware out there, keyloggers. Keyloggers can record everything you do online, like your credit card numbers or when you login to your bank account. They capture this information and send it back to the criminals who created it to begin with.

Zlob trojans are difficult to remove and you should only try to remove them with a highly rated antispyware software that is proven to remove this type of infection.

Find out more about the Zlob Trojan here