Virus Database

TrojanDownloader.Win32.Dyfuca.a

Description TrojanDownloader.Win32.Dyfuca.a

This family of Trojans is designed to download a variety of adware and spyware to victim machines.
It spreads via the Internet as the Internet Optimzer utility; there are several modified versions:
InternetOptimizer/Iopti:
unknown-server errors, page-missing errors, server errors and even password-required errors are redirected to Internet Optimizer's controlling server at www.internet-optimizer.com.
InternetOptimizer/Nem:
as Iopti, but searches are hijacked to yoogee.com (a search site run by the makers of InternetOptimizer).
InternetOptimizer/Wsem:
a larger version of the software, whose purpose is unclear.
InternetOptimizer/Crmrest:
an ActiveX downloader control for InternetOptimizer.
As a rule, the Trojan can be deinstalled from the system using the Control Panel: Add/Remove Programs, names Active Alert and Internet Optimizer.

Check other viruses! Be aware! Use Antiviral Software

Hider.2143

Description Hider.2143

This is a dangerous non-memory resident encrypted parasitic virus. It searches for COM (except COMMAND.COM) and EXE files, and writes itself to the end of the file. It deletes anti-virus data files. It contains the text string:
*.MS *VIR.DAT COMMAND.
On 13th of each month it plays a tune and display the message:
Anston Rant Returns! Miss me, folks?
I'd trash some data, but my medication kicked in!

Hider.2169

Description Hider.2169

This is a dangerous non-memory resident encrypted parasitic virus. It searches for COM (except COMMAND.COM) and EXE files, and writes itself to the end of the file. It deletes anti-virus data files. It contains the text string:
*.MS *VIR.DAT COMMAND.
On 13th of each month it plays a tune and display the message:
Anston Rant Returns! Miss me, folks?
I'd trash some data, but my medication kicked in!

Home