Saturday, May 27, 2006

Viral Clickbot Zombie Network - Not a Virus but a Trojan Distributed by P2P

Just to clarify, the virally distributed zombie network I blogged about in my last post, is not actually a virus but a trojan. As such is growth rate (spawn rate) is not as high as it would have been if it utilised a viral transfer mechanism.

Clickbot.A is distributed mostly via P2P networks, so be careful what you download especially when looking for cracked software or P2P porn - you have been warned!
The Clickbot.A mechanism consists of two parts. The first is an executable file that launches a dynamic link library on the system, which later deletes itself. The second is a component of Internet Explorer that notifies the attacker that computer is infected, even allowing the control components to be updated. The bot then registers in the database of the control system, checking that the creator has given authorization to start clicking, and if so, will request the list of addresses from which to click.

OK... so a distributed clickbot isn't going to compromise your computer, but if you're moving in shady circles like these, then expect worse than just clickbots. I speak from experience. I once tried to install a crack from e-mule and it destroyed my machine on a low level. It was the worst nightmare i've had personally and will a) never forget it and b) learn from playing around in dirty water.

My advice.... back up your data and if you need the software commercially, get a legit copy! and if you want to try it out use a legit trial copy.

No comments:

Email Subscribe

Receive the latest posts via e-mail.. don't worry, I promise I won't spam you and the email delivery is managed by feedburner so you can unsubscribe at any time.

Subscribe to Feed