IH-Infector 1.2


· Overview ·
· Origins ·
· Operation ·
· Detection and Removal ·
· Research ·



Overview

Alias:

Exploit.Win32.IH_Infector.12 [Kaspersky], Trojan Horse [Panda]

Category:

Trojan Creation Tool: A program designed to create Trojans. Some of these tools merely wrap existing Trojans, to make them harder to detect. Others add a trojan to an existing product (such as RegEdit.exe), making it a Dropper.

Exploit: A way of breaking into a system. An exploit takes advantage of a weakness in a system in order to hack it. Exploits are the root of the hacker culture. Hackers gain fame by discovering an exploit. Others gain fame by writing scripts for it. Legions of script-kiddies apply the exploit to millions of systems, whether it makes sense or not. Since people make the same mistakes over-and-over, exploits for very different systems start to look very much like each other. Most exploits can be classified under major categories: buffer overflow, directory climbing, defaults, Denial of Service.

Trojan: Any program with a hidden intent. Trojans are one of the leading causes of breaking into machines. If you pull down a program from a chat room, new group, or even from unsolicited e-mail, then the program is likely trojaned with some subversive purpose. The word Trojan can be used as a verb: To trojan a program is to add subversive functionality to an existing program. For example, a trojaned login program might be programmed to accept a certain password for any user's account that the hacker can use to log back into the system at any time. Rootkits often contain a suite of such trojaned programs.

Similar Pests:

Trojan Creation Tool · Exploit · Trojan

Origins

Author:

Faceless Master,

By This Author:

Faceless ICQ · Herman Uploader · Herman Uploader 1.0 · Herman Uploader Public Beta 1.0 · Herman Uploader Public Beta 1.1 · IH Infector · IH Infector 1.0 · RAM Eater · RAM Eater 1.2 · Remote VIREUS · Remote VIREUS version 2 · Sin · Sin 1.0b · Sin 2.0 · Sin Static Ip Notifier · Static IP Notifier

Date of Origin:

January, 2003

Operation

Storage Required:

  • IH-Infector 1.2: at least 437 KB
  • Detection and Removal

    Automatic Removal:

    PestPatrol detects this.

    PestPatrol removes this.



    Manual Removal:

    Follow these steps to remove IH-Infector 1.2 from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.
    Stop Running Processes:

    Kill these running processes with Task Manager:

    Remove Files:

    Remove these files (if present) with Windows Explorer:

    Research

    File Analyses:

    More Info:

  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
  • Research By:

  • PestPatrol's Pest Research Center
  • Last Revised:

    April 03, 2005