Check Point Advisories

Update Protections against Recent Malware Threats (3-Aug-08)

Vulnerability
Protection

Check Point Reference:	CPAI-2008-110
Date Published:	3 Aug 2008
Severity:	High
Last Updated:	Tuesday 01 January, 2008
Source:	Trojan Agent.nac Spyware: PC Privacy Cleaner Spyware: MediaTubeCodec Spyware: Dropper Agent.rqg Spyware: Win32.BHO.bgf Spyware: AdWare.Win32.Ejik.ec variant
Protection Provided by:
Who is Vulnerable?	Microsoft Windows clients
Vulnerability Description	Malware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network access to intrude upon organizations, destroying or stealing data. Spyware is computer software that is installed without the user's informed consent on a personal computer to intercept or take partial control over the user's interaction with the computer. Spyware programs can collect various types of personal information, install additional software, redirect Web browser activity, or divert advertising revenue to a third party. Adware is an advertising-supported software package which automatically plays, displays, or downloads advertising material to a computer after the software is installed on it or while the application is being used. A Trojan horse is a program that installs malicious software while under the guise of doing something else.  Trojans are known for installing backdoor programs which allow unauthorized non permissible remote access to the victim's machine by unwanted parties with malicious intentions.
Vulnerability Details	The update includes new protections against 5 recent malware threats: Trojan Agent.nac - Trojan Agent.nac downloads and installs other malware to the user's computer without the user's consent. Spyware: PC Privacy Cleaner - PC Privacy Cleaner is a rogue security program that shows false warning messages and misleading scan results that are often installed through Trojan exploits. It generates pop-ups and downloads other malware to the user's computer. It also prompts users into purchasing the application. Spyware: MediaTubeCodec - MediaTubeCodec is a spyware that hijacks the browser and contacts remote servers to download other malwares onto a user's computer. It alters the Internet Explorer settings, hijacks the browser start page and auto search and generates popup advertisements. Spyware: Dropper Agent.rqg - Dropper.Agent.rqg is a spyware that downloads and installs unwanted software on a user's computer without user permission. It also pops up advertisements. Spyware: Win32.BHO.bgf - Win32.BHO.bgf is an adware that hijacks the browser and monitors the user's web activity. It hijacks the Internet Explorer searches to remote servers and generates pop-up advertisements. Spyware: AdWare.Win32.Ejik.ec variant - AdWare.Win32.Ejik.ec variant is a spyware that hijacks the browser. It hijacks the Internet Explorer start page, auto search, and downloads other malwares on the user's computer without the user's consent.

Protection Overview

This website uses cookies for its functionality and for analytics and marketing purposes. By continuing to use this website, you agree to the use of cookies. For more information, please read our .