Panda Security: the most dangerous trojans of the last week

19th November 2007

Panda Security Company submitted a report on the top threats for the last week. Specialists of the company warn users of new dangerous trojans that emerged last week: Astry .A and EbodaR .A.
Astry .A blocks the possibility of changing Explorer`s settings. It also edits information displayed in a tab "View" in the window, "Folder properties" of Explorer, and prohibits changing parameters of the file manager.
EbodaR .A is a trojan, which gets installed on computers as a result of using vulnerability present in some versions of Acrobat Reader. For this trojan to get to the computer, the system must be equipped with Internet Explorer 7.
To take advantage of the security gaps, the attackers send malicious PDF- files in electronic messages. If a user executes the file, Windows XP`s command activates, which disables the firewall system. Then the trojan is downloaded from a certain internet address, which then executes.
Immediately after installing, EbodaR .A can download other malicious files on the infected computer.