] We have received word that a trojaned version of DC++, ] which is a P2P program, is available for download on ] several legitimate sites, including download.com. ] ] From what we know only build 0.668 is affected. The ] trojaned version installs several malware onto the system ] upon execution of the installer. ] ] It installs TrojanDownloader.Win32.Istbar.er, ] Trojan.Win32.Krepper.ag and Trojan.Win32.Agent.ba - these ] files are all in a way related to the installation of ] AdWare. ] ] Once again we're seeing that a single package is ] downloading a huge amount of AdWare. All in all we ] detected about 50 infected objects on an infected system. ] ] It's interesting to note is that the trojaned version of ] DC++ actually is smaller in size than the clean one. Viruslist.com - Analyst's Diary |