trojan

How can you prevent Man in the Browser attacks?

Been reading up on MitB attacks and some things worry me about this. From WIKI: The use of strong authentication tools simply creates an increased level of misplaced confidence on the part of both customer and bank that the transaction is secure. One of the most effective methods in combating a MitB attack is through an Out-of-Ba...

Debugging and Analyzing a Trojan

I'm interested in using something like OllyDbg to examine a program that potentially has Trojan-like characteristics. Does anyone know any good tutorials on how to do this safely? Basically the program is a "bot" for a video game, but I suspect that it has back doors and/or will upload information it gathers (such as passwords) to a re...

Javascript Trojan Dissection

Hi all, I've recently been playing with allot of Javascript and started to consider that I couldn’t encounter a piece of Javascript that I wouldn’t be able to debug. Well I was pleasantly surprised and angered today when we discovered a number of javascript redirect trojans on our company’s website. Most of the code we found I was abl...

Help with potential trojan passed through site

So I'm pretty sure my site's been infected with some kind of trojan or virus that attached itself to the scripting within the site. Every time I try and update my Drupal-based site, I get a white screen with this stupid "i'mhere" message. Upon reload, the changes will take affect but I don't know what this is doing once changes are saved...

Protect website from Backdoor/PHP.C99Shell aka Trojan.Script.224490

My website was infected by a trojan script. Somebody managed to create/upload a file called "x76x09.php" or "config.php" into my webspace's root directory. Its size is 44287 bytes and its MD5 checksum is 8dd76fc074b717fccfa30b86956992f8. I've analyzed this file using Virustotal. These results say it's "Backdoor/PHP.C99Shell" or "Trojan....

Embedding Javascript Within an Image File

I've noticed a new trend in distributing potentially unsafe code where people will post an image to a server with a watermark suggesting that they change the filename to have a .HTA file extension. I realized that .HTA was an HTML Application file, which are implicitly trusted by Microsoft's logic and can contain code to do just about a...

HaXe download claims to have Lineage.gen trojan in it

I am setting myself up with FlashDevelop, and i went to download and install HaXe (which is the language i want to use) from this page (the windows installer), when my Windows Security Essentials said that Lineage.gen got stuck in my win32 directory from the downloaded installer (i didn't even run it yet). Did i download from the wrong s...