Free antivirus Help Blocked? Conficker Information
Recently I found out this site was blocked by a Trojan horse. I did a quick search for Free AntivirusHelp.com and came across Threat Expert's assessment of the Trojan Dropper: Win32/Nuploo.A. The Trojan horse's first malicious intention is to block access to security sites. It achieves this by inserting a message into the host file of Internet Explorer or Firefox to not connect to certain security sites. Essentially, these security sites are no longer trusted and simply won't load on an individual's computer. Usually the individual will be clueless about this hack and will think the server/website is down (when it is in fact online.) In addition, even if the virus is removed, the host file will still contain the bogus entries and continue blocking security sites. This prevents people from coming to this site to install antivirus protection. Unfortunately, this site was listed in the virus. See below:
(this shows the modified host file on a victims computer. A few of the many entries. The Host File should usually have nothing in it.)
In order to avoid this type of attack, consider downloading Spyware Doctor. While this product is on the main page, it provides excellent host file protection. The software will prevent a virus from modifying the host file even if the virus still exists.
- Download Spyware Doctor in Google pack Download Here...
Almost everyone knows about the Conficker Virus. The virus was all over the news and I even saw the most visitors ever to this website on the day that Conficker was released. However, many people do not understand the details behind the news. One being that it is almost impossible to tell what Conficker's motives were. The virus was packed into an executable file hiding the actual source code from the antivirus observer. This prevents virus experts from analyzing what the worm/virus intended to do. Conficker was also scanning many websites for instructions to activate. Now, there are a number of methods to sandbox viruses and many antivirus companies have specialized software to test worms. Conficker's purpose still remained a mystery. Thankfully, Conficker wasn't that bad and ended up not doing anything too malicious. However, new virus writers can simply attach a small amount of code to the original Conficker worm creating a new worm. Individuals have actually attempted this and attached phishing modules to the worm. An computer user would therefore have to frequently update their antivirus editions to make sure that they have protection against the latest worm variant.