10/19/2010
Security researchers from Symantec warn that a destructive Trojan virus, which wipes all data from the system partition, poses as a Stuxnet removal tool developed by Microsoft. The Trojan — which Symantec has named Trojan.Fadeluxnet — has no apparent monetary motives behind it. It was being passed around on forums where people discussed Stuxnet clean-up solutions, suggesting that it might target the worm’s victims. It comes with a name of “Microsoft Stuxnet Cleaner,” in a likely attempt to leverage Microsoft’s known active involvement in Stuxnet research. When executed, it makes registry modifications to prevent exe, mp3, jpg, bmp and gif files from opening. And as if that does not cripple the system enough, it also starts deleting all files from the system partition. “The tool will certainly remove Stuxnet if it was on the C drive, but it will also take with it any other content including your valuable data,” a researcher at Symantec warned.
________________________
Secured by AVG LinkScanner - http://www.avg.com/fb
Destructive Trojan Poses as Microsoft Stuxnet Removal Tool