Another malware infection in the wild

Dec 21, 2007 09:27 GMT  ·  By

First4DRM arrived just in time for Christmas and, let's admit, nobody has ever expected it. First4DRM is a malware infection that affects the Windows operating systems, attempting to change their settings and even remove certain files stored on the computer. A security notification published on 2Spyware.com informs that First4DRM attempts to hide from the user and act in the background, in order to avoid being spotted by the consumers. The security company set a severity scale of 55 out of 100, which means the malware is pretty dangerous for our computers, so in case you got infected, remove it as soon as possible.

"Malware is usually secrectly installed on user's computer and then starts serving its dangerous purposes, such as system file removal, changing of OS options, 'flood' attacks", 2Spyware.com explained the concept of malware. However, it's not yet confirmed whether or not First4DRM includes any of the mentioned properties.

If you'd like to remove the First4DRM infection out of your computer, you can do this manually by deleting the following registry entry:

code
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServices$sys$aries
In addition, you have to delete aries.sys from your computer and remove the following two directories:
code
C:WindowsSystem32$sys$filesystem
code
C:WinntSystem32$sys$filesystem
The malware infections are pretty dangerous for every user, because they attempt to steal usernames, passwords and other sensitive information stored on the computers. Usually, it's recommended to keep the antivirus technology up-to-date with the latest virus definitions and apply the latest patches for the operating system. However, it has been proved that only some antiviruses are able to detect the newest pieces of malware, so an extra-caution is always recommended.

In case you didn't install a security solution on your computer, you can choose one from the applications listed on Softpedia, all of them being available here.