New threat out there in the wild

Dec 18, 2007 14:51 GMT  ·  By

Do you still believe the DLL files are not too dangerous for the data stored on your computer? Just wait to read this piece of news and tell my your opinion. Let's get straight to the juicy parts: a new Trojan was discovered by security company Trend Micro, as it "may arrive bundled with malware packages as a malware component". Although it has a low damage potential and a low distribution potential, it affects most Windows versions including "NT, 2000, XP, Server and 2003". 'So what's the connection with the DLL format?' you may ask. Well, it seems like TROJ_VUNDO.AAE comes as a DLL file attempting to reach the Windows system folder.

"It arrives as a .DLL file that exports functions used by other malware. It uses a random file name and is usually dropped in the Windows system folder", security vendor Trend Micro wrote in the advisory notification.

"This Trojan creates a registry entry to enable its automatic execution at every system startup. It also registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run."

Wanna see something really scary? Trend Micro published the Trojan description 16 hours and 11 minutes ago. Since then, a lot (and when I'm saying a lot, I'm talking about 16,270) of computers were infected, most of them located in the United States. No less than 15,303 affected systems belong to Americans, while 92 of them are owned by the Japanese. 89 infected computers come from Germany, whereas 85 were identified in Turkey.

I guess I made myself clear that TROJ_VUNDO.AAE is pretty dangerous, so just try to keep your antivirus up to date with the latest virus definitions, in order to avoid a potential disaster that may target your so important information.