Another kind reminder

[Symantec]

Another kind reminder
<p>We have in the past repeatedly warned that free things on the internet do not always come cost free. And today, we have to make a kind reminder as we came across a new example.</p>

<p>Security Response received a file with a .tgz file extension, which exploits a new unknown vulnerability in a free Japanese decompress tool "Lhaz v1.33". The file is detected as <a href="http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-081806-0233-99">Trojan.Lazdropper</a>.</p>

<p>After a successful exploit attempt, <a href="http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-081806-0233-99">Trojan.Lazdropper</a> drops two files, both detected as <a href="http://www.symantec.com/security_response/writeup.jsp?docid=2001-062614-1754-99">Backdoor.Trojan</a>, onto the infected computer. As Backdoor.Trojan opens a back door to communicate with the author for further actions, it is obvious that purpose behind Trojan.Lazdropper is to take a complete control over the infected machine.</p>

<p>As always, we recommend that you keep your security software up-to-date and follow <a href="http://www.staysafeonline.info/practices/index.html">safe computing practices</a>.</p>

<p>We cannot stress this enough; if you receive any unexpected files, do not open them.</p>
http://www.symantec.com/enterprise/security_response/weblog/2007/08/another_reminder_for_using_fre.html
http://www.symantec.com/enterprise/security_response/weblog/2007/08/another_reminder_for_using_fre.html
Sat, 18 Aug 2007 01:16:21 -0800