Comments
Ashley 1.0.1 is an upload
trojan. When running, Ashley downloads a file from a web site and then
runs the downloaded file. Unlike other upload trojans, Ashley can infect
other computers via mIRC and Outlook. Ashley version 1.01 comes with 4
different servers. All of the servers download a file and then run the
downloaded file, which is what the first server does. However, the second
tries to infect on mIRC while the third tries to infect on mIRC and Outlook.
The fourth tries to infect on mIRC and Outlook with a different method
for Outlook spreading. Note that Ashley, when modifying mIRC, changes the
auto accept dcc files to true and changes the quit message to "Ashley".
Ashley is programmed in Visual Basic and needs Visual Basic runtime files,
which reduces its chances to spread.
How To Remove
Quick fix: no quick
fix programs
Manual removal:
-
Delete the trojan file
ashley_secret_xxx_diary.exe
in the windows system directory.
|
