Trojan.Win32.AntiNOD - Attn NOD32 Users

Trojan.Win32.AntiNOD

http://www.viruslist.com/en/viruses/encyclopedia?virusid=49931

For those of you who frequent the NOD32 forums, 1) what is this idiot up
to, and 2) why is he so pissed off at Richard Marko?

Quote: "When launched, the Trojan will copy its executable file to the
following locations:

* C:\Program Files\Kazaa\My Shared Folder\Nod32_3_Setup.exe
* C:\Program Files\eMule\incoming\Nod32_3_Setup.exe
* C:\Program Files\grokster\my grokster\Nod32_3_Setup.exe
* C:\Program Files\bearshare\shared\Nod32_3_Setup.exe
* C:\program files\ICQ\Shared Folder\Nod32_3_Setup.exe
* C:\Program Files\winmx\shared\32_3_Setup.exe
* C:\Program Files\morpheus\my shared folder\Nod32_3_Setup.exe
* C:\Program Files\limewire\shared\Nod32_3_Setup.exe
* C:\Program Files\XoloX\Downloads\Nod32_3_Setup.exe
* C:\Program Files\Tesla\Files\Nod32_3_Setup.exe
* C:\Program Files\Nod_IMON.exe
* C:\Regards to Richard Marko, I wish that Advanced Heuristic of NOD
will NOT detect this worm.f"

Ron

On Apr 20, 10:37 am, Ron Lopshire <not....RemoveThis@ovbl.org> wrote:
> Trojan.Win32.AntiNOD
>
> http://www.viruslist.com/en/viruses/encyclopedia?virusid=49931
>
> For those of you who frequent the NOD32 forums, 1) what is this idiot up
> to, and 2) why is he so pissed off at Richard Marko?
>
> Quote: "When launched, the Trojan will copy its executable file to the
> following locations:
>
> * C:\Program Files\Kazaa\My Shared Folder\Nod32_3_Setup.exe
> * C:\Program Files\eMule\incoming\Nod32_3_Setup.exe
> * C:\Program Files\grokster\my grokster\Nod32_3_Setup.exe
> * C:\Program Files\bearshare\shared\Nod32_3_Setup.exe
> * C:\program files\ICQ\Shared Folder\Nod32_3_Setup.exe
> * C:\Program Files\winmx\shared\32_3_Setup.exe
> * C:\Program Files\morpheus\my shared folder\Nod32_3_Setup.exe
> * C:\Program Files\limewire\shared\Nod32_3_Setup.exe
> * C:\Program Files\XoloX\Downloads\Nod32_3_Setup.exe
> * C:\Program Files\Tesla\Files\Nod32_3_Setup.exe
> * C:\Program Files\Nod_IMON.exe
> * C:\Regards to Richard Marko, I wish that Advanced Heuristic of NOD
> will NOT detect this worm.f"
>
> Ron


I detect 2 variants of it currently. lol

--
Dustin Cook
http://bughunter.it-mate.co.uk