Virus HTML/Dldr.Asikal!

Viruses and worms
1

Hi, does anyone know if Avast4Home protects me against HTML-Scriptvirus HTML/Dldr.Asikal! ?

I cant find a list or database of viruses that Avast knows.

2

There is no standardisation or naming convention for viruses so it is difficult to say, but there is no reference to ‘Asikal’ in the avast virus database, you would need to check some site that you can search for aliases, I use VGREP http://www.virusbtn.com/resources/vgrep/index.xml (you need to register to use it) and there I can find no hits for Asikal either. So it may be very new as it takes time to get listed.

So where did this information come from ?

3

I read this trojan name at a german Anti-Spam Forum. They wrote if someone opens a infected website this trojan will automaticly be downloaded. The Anti Virus software AntiVir has already added this signature. (http://www.avira.com/de/threats/section/vdfhistory/vdf_no/6.33.00.225/6.33.00.225.html) But i dont like to install different anti virus programms and i am a avast fan. :slight_smile: sorry for my englisch :-\

4

Yes that is only a list of virus names added to their virus database and no information on the virus/trojan itself.

As you say it isn’t advisable to have two AVs installed at the same now that the New AntiVir program has resident elements it may well conflict with avast.

One thing that may help in prevention is take care in the sites you visit, don’t click links leading to unknown sites or emails without checking, Dr Web Extension in firefox, etc. If you are using IE there is a greater likelihood of malware infection because of activeX, etc. so an alternate non-ie browser will reduce the risk.

SECURITY TIPS, TRICKS & INFO
Whilst browsing or collecting email, etc. if you get infected then the malware by default inherits the same permissions that you have for your user account. So if the user account has administrator rights, the malware has administrator rights and can reap havoc. With limited rights the malware can’t put files in the system folders, create registry entries, etc. This greatly reduces the potential harm that can be done by an undetected or first day virus, etc.

Check out the link to DropMyRights (in my signature below) - Browsing the Web and Reading E-mail Safely as an Administrator. This obviously applies to those NT based OSes that have administrator settings, winNT, win2k, winXP.

Your English is fine, much better than the very little German I understand but can’t write. I often get help from http://babelfish.altavista.com/ when I checked the link you gave.

5

Hi MrPuny,

Important to read this to protect against these kind of viruses.
http://www.slipstick.com/outlook/antivirus.htm

polonus

6

Thanks for your help! I try to keep my computer free of viruses, trojans and other bad stuff. The problem is, that in cause of my business informatics study i analyse phishing mails and pharming. Therefore i klick a lot of bad links and visit a lot of bad sites. Nevertheless I dont want to become a phishing victim by myself.

Now i got some more information about the Asikal trojan. Once you klicked a infected website the trojan will be installed. I does not matter if java script is deactivaded, since the download is working throug cgi. The trojan installs the files 0sxrdxqv.hta or y1uqodfo.hta into the root directory on your local disk. But i dont know whats going on with this files.

7

Hi MrPuny,

What you also need regarding your job is have an idea what you are up against clicking a link, also known as in-browser security.
Install DrWeb hyperlink pre-scanner add-on for IE, FF or Opera from here: http://info.drweb.com/show/2653
Also install an add-on for siteadvisor, where you see how pre-visited sites are rated: so many bad links, so much spam after e-mailing, etc. etc., install from here: http://www.siteadvisor.com/
I know you have to click the links inside a lab setting for analysis,
but better beforehand to know what you’re up against.

greets,

polonus

PS The two add-ons are good protection for everyone.

8

Thanks a lot! I installed the add-ons. I think that was what I am looking for, but I did not know that this software exists. Now fighting against phishing and pharming can continue… :slight_smile: