Another warning - DNS Trojan poses as iPhone unlocking utility

[DorsetBoy]

http://www.speedguide.net/read_news.php?id=3385

An application that offers to unlock iPhones is actually designed to hijack internet connections on compromised Windows PCs, security watchers warn.

Spam messages direct potential victims to a domain called iphone-iphone.info that offers links to download a Windows executable called blackra1n.exe. The application claims to offer an unlock utility but instead it changes default DNS settings on infected Windows PCs, hijacking internet connections in the process.

Romanian anti-virus firm BitDefender, which identifies the executable as Trojan-BAT-AACL, explains that the malware comes as a Windows batch file packed alongside the iPhone jailbreaking application.

"The Trojan attempts to change the preferred DNS server address for several possible Internet connections on the users' computers to 188.210.[REMOVED]," BitDefender explains. "This allows the malware creators to intercept the victims' calls to reach internet sites and to redirect them to their own malware-laden versions of those sites."

[Rik]

I don't know about anyone else, but security firms based in former Eastern Bloc countries always make me a bit nervous.

[DorsetBoy]

I don't know about anyone else, but security firms based in former Eastern Bloc countries always make me a bit nervous.

and you use ESET ? 

[Rik]

I do, but I'm prepared to make an exception.

[Ray]

 

[Gary]

Kaspersky make me nervous, buggy messy stuff

[DorsetBoy]

Kaspersky make me nervous, buggy messy stuff

It owns your PC for ever if you let it   The last suite from them I saw in use was crazy, the interface and settings were more complicated than the entire OS it is supposed to protect.