Trojan pretends to do good

Security company Symantec is warning Internet users of a Trojan horse that removes adware but alters the settings in computers.

While Downloader.Lunii eliminates a variety of adware programs--often known as spyware--the Trojan also tries to maliciously change the security settings of Windows PCs and then downloads files from unknown Web sites, Symantec said.

"It's common that a Trojan will try to change as much security as possible," said Nigel Beighton, Symantec's director of enterprise strategy. "They often try to change Microsoft, Symantec and McAfee software."

Symantec classified Lunii as a low-risk Trojan.

Trojan horses are often referred to as spyware because of their ability to stealthily run in the background of a computer without being detected. Antispam organization Spamhaus recently warned that spyware has taken control of tens of thousands of networked computers. Spammers and hackers then use these "zombies" to launch denial-of-service and spam attacks, the company said.

Last week, the U.S. House of Representatives passed a bill to criminalize the act of altering PC configurations, taking control and downloading software onto a PC without the owner's consent.

Symantec has recommended users to switch off any unnecessary services--Windows functions such as printer and file sharing--and to keep security patches up to date.

Dan Ilett of ZDNet UK reported from London.

[badford05]

well i guess symantec would have to warn you to keep security patches up to date since there software does not work. this is the 4th time that a trojan has shut off my norton internet security and wont let it open. and another thing is that there software does not recognize most of these threats at all. However there is a free toll called microsoft malicious software removal tool that you can get for free from the ms web site that will not only recognize it but often times will be able to remove it. Huh i thought thats what i paid symantec for.
Any and all comments are welcome.