Posts Tagged ‘host computer’

Some spyware that will infect a computer is definitely an unwelcome presence that overstays its welcome and does some nasty damage to the host computer which of course is your computer and also to you, the end user. Spyware will make your computer run a lot slower and it will also try to steal your personal details including your credit card number and pass-words. Also anything else it can be captured through surreptitious means. The obvious solution that you can prevent such a bad thing from happening to you, is to protect your computer. This is only possible if you use good spyware removal software programs.

You Secret Information Will Be Compromised

Spyware will attach it to your files and that in turn means that it gets an opportunity to gain access to vital information stored on your computer. If you want peace of mind then invest in good spyware removal program and help get rid of the problem before it harms you and your computer.

A good spyware removal program must be designed in such a way that they will destroy every last piece of spyware on your computer system. The high importance of using a good spyware removal program is such a good thing that you simply should not delay buying and installing one as soon as possible. Given that you will be using the Internet which is the home of all spyware it makes sense to first install good spyware removal program and then do the surfing rather than use the opposite route.

If you surf the Internet without protecting your computer against spyware you might find that even a very good spyware removal program will not be able to undo all the damage that the spyware has caused in the meantime. Good spyware removal programs are those that can scan your computer in real time and ensure that the risk of infection from spyware is minimal. Of course, even good spyware removal programs cannot entirely prevent spyware from sneaking into your computer; but, they will ensure that the risk is very little.

To install effective spyware removal software you must first become understanding about what spyware really does and how can it get into your computer system. Only after some checking of the various options, will you be able to find a good spyware removal program for use on your computer.

Of course, you should always pick the best spyware removal software. That in itself means choosing only a proven spyware removal program that is absolutely efficient and which is also inexpensive. Don’t go for the cheap and nasty spyware removal programs because they will be unlikely to detect all manner of spyware and secondly they may not even be able to effectively remove those spyware that it has detected.

Here another interesting yet dangerous infection: Exploit AdobeReader.

Exploit.AdobeReader includes malicious code that permits remote execution of random code on the target computer system. As the host computer's logged-in user, the executed commands will run using those privileges.

Here were a few things I noticed about this remote exploit.

First, it creates a new process called CbEvtSvc.exe. According to threat and exploit authorities the process has a 92% identification rate. Threat Experts declared that in 92% of the cases this process is an infection of your computer system.

Second, it starts itself as a service under the COM+ Event System and its looks to run as a non-svcshost process.

Two steps need to be taken: First remove the exploit using Spyware Doctor Download so that the process and its registry entries are removed. Second read the following bulletin snippet from Adobe:

A critical vulnerability has been identified in Adobe Reader 9 and Acrobat 9 and earlier versions. This vulnerability would cause the application to crash and could potentially allow an attacker to take control of the affected system. There are reports that this issue is being exploited.

Adobe has released the Adobe Reader 9.1 and Acrobat 9.To resolve this issue, you need 1 product update. Upgrade to Adobe Reader 9 if you currently use Adobe Reader and Acrobat 9 - Adobe Recommends.1 and Acrobat 9.1. Adobe recommends users of Acrobat 8 update to Acrobat 8.1.4, and users of Acrobat 7 update to Acrobat 7.1.1. For Adobe Reader users who can’t update to Adobe Reader 9.1, Adobe has provided the Adobe Reader 8.1.4 and Adobe Reader 7.1.1 updates.

Release date: February 19, 2009

Last Updated: March 24, 2009

Vulnerability identifier: APSA09-01

CVE number: CVE-2009-0658

Platform: All platforms

Summary

This critical vulnerability has been identified in Adobe Reader 9 and Acrobat 9 and earlier versions. This vulnerability would cause the application to crash and could potentially allow an attacker to take control of the affected system. There are reports that this issue is being exploited.

As a malicious trojan or bot, Trojan Agent ASMU is definitely a security risk for the network of computers and the infected computer itself.

I am troubled by the above statement in at least a couple of ways. First, Trojan Agent ASMU could be a Trojan Horse or it could be a bot.  Second, it could infect other computers in the network.

I have discussed Trojans before but let us look at what they are again. Trojans are a type of malware that appears to perform a sought-after purpose but in fact carries out secret malicious tasks. These tasks let unauthorized admission to the host computer, giving them the capacity to save their files on the user’s computer or even observe the user’s screen and be in command of the user’s computer.

What is even more concerning is that it does not have to be a Trojan but it could be a Bot.  A Bot typically runs hidden and uses a covert channel to communicate with its command center. Bots are not preprogrammed threats. The bot can be controlled by the command center once they have been installed onto your computer!

Newer bots can automatically scan and propagate their environment themselves using vulnerabilities and weak passwords. Generally, the more vulnerabilities a bot can scan and propagate through, the more valuable it becomes to a botnet controller community. The process of stealing computing resources as a result of a system being joined to a “botnet” is sometimes referred to as “scrumping.”

We are constantly faced with threats such as these that put our computers in a compromised state. For this threat in particular, it can be removed using the Spyware Doctor with Antivirus download.PC Tools is the creator of this spyware removal software. It is a very popular removal tool for infections. If you have been plagued with the Trojan Agent ASMU infection then spyware doctor with antivirus should be able to help rid it from your computer.