TrojanDropper:Win32/Lisfel.A is a malicious trojan horse which drops other Lisfel components on the compromised computer. When malware exploits use-after-free vulnerability in the CMshtmlEd, remote attackers will be able to execute arbitrary code via a crafted web site. This trojan can sneak into the targeted computers via the malware, such as Exploit:Win32/CVE-2012-4969.A. Once the threat invades your PC, it can install user.dll and wlupdate.exe and create tmp and lisfl.dll on your system. In addition, it then modifies the registry in order to run the Lisfel components it drops every time you start up Windows. The trojan can launch a hidden web browser window to access the server “receo.konkuk.ac.kr”, to which it probably directs traffic. By this, remote attackers can trace your browsing histories and record confidential data like e-bank accounts and passwords and other information related to your property. In a word, it is a malicious threat and should be removed as quickly as you can. blog.mightyuninstaller/remove-trojandropperwin32lisfel-a-how-to-get-rid-of-trojandropperwin32lisfel-a/
Posted on: Fri, 14 Jun 2013 03:14:13 +0000