Softpedia >News >Security >Virus alerts
Softpedia Homepage   

Iranian Infection Deletes Your Files

Tranzhva 1.0 spotted in the wild

Dec 21, 2007 14:08 GMT  ·  By
  

Here we go again: another Trojan horse affecting the Windows operating system was spotted in the wild by 2Spyware.com. The security company set a severity scale of 95 out of 100, which means the infection is extremely dangerous for every person affected by it. According to the reports, Tranzhva 1.0 is an Iranian Trojan that wants to get full control over the affected systems, capture screenshots and log the computer activity.

"Trazhva is an Iranian trojan. It gives the intruder full control over the victims computer: log keystrokes, take screenshots, record audio, and mess with any files and computer settings. It is very dangerous and it is possible that manual removal won't do the job", 2Spyware.com wrote in the security advisory published today.

In case you don't know for sure whether or not you got infected with Tranzhva, you can open Task Manager (right click on the Windows Taskbar and choose Task Manager) and check if Tranzhva 1.0.exe is placed among the running processes. Please note that the Trojan horse attempts to hide from the user and acts in the background, in order to avoid being spotted by the user.

In addition, you can check if the following entry is added to your Windows registry:

code
HKEY_LOCAL_MACHINESoftwareTranzhva 1.0
The Trojan infections have always been pretty dangerous, but in the last two months, we saw way too many malicious files targeting to reach our computers. So, how can we protect ourselves? It's pretty easy to say, because all we need to do is to install an antivirus solution, update it and not forget to apply the latest patches for our operating system.

In case you didn't install a security application to defend your system, you can choose one of the programs listed on Softpedia, all of them available here.