Anilrgowda

Risk Assessment - Home Users: Low - Corporate Users: Low Date Discovered: 1/5/2007 Date Added: 1/5/2007 Origin: N/A Length: N/A Type: Trojan SubType: Application extension DAT Required: 4933 Virus Characteristics

PWS-Maran.dll is the detection for a dll which is installed as a Layered Service Provider (LSP) to WinSock to sniff and steal personal information by PWS-Maran.dr. Please refer to the description of PWS-Maran.dr for more details.

Indications of Infection

Please refer to the description of PWS-Maran.dr.

Method of Infection

Trojans do not self-replicate. They are spread manually, often under the premise that the executable is something beneficial. Distribution channels include IRC, peer-to-peer networks, newsgroup postings, email, etc.



Removal Instructions

AVERT recommends to always use latest DATs and engine. This threat will be cleaned if you have this combination. Additional Windows ME/XP removal considerations

Aliases

Troj/Maran-Gen (Sophos), Trojan-PSW.Win32.Nilage.ajf (Kaspersky), TSPY_MARAN.D (Trend Micro)