• Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Rogue Anti Spyware
    • Virus
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

My AntiSpyware

Free antispyware software, Online Scanners, Instructions on how to remove spyware and malware.

Menu
  • Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Rogue Anti Spyware
    • Virus
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools
Home › Trojan › Santa Claus leaves you a Trojan for Christmas

Santa Claus leaves you a Trojan for Christmas

Myantispyware team December 23, 2005     No Comment    

– A new Trojan, MerryX.A, reaches victims in an email with the subject “MERRY CHRISTMAS!”, and hides behind an animation with Santa Claus and Christmas music

– This Trojan joins the list of malware species that take advantage of the massive sending of Christmas cards via email to enter users’ computers

PandaLabs reports the appearance of a new Trojan, MerryX.A, which uses the theme of Christmas to distract users’ attention while infecting their computers. This Trojan, distributed in email messages, aims mainly at gathering information from the affected system.

Infection starts with arrival of an email with the subject “MERRY CHRISTMAS!”, and the text line: “Merry Christmas and a Happy New Year!”. This email includes two attached files: an animated GIF image called A_LIGHTSMC10.GIF, which shows the phrase “Merry Christmas” among bright lights, and a self-extracting RAR file which contains two files: a copy of the Trojan (called SQLServer.exe), and a Flash animation.

Whereas the GIF image does not infect the user’s computer, the self-extracting RAR file does trigger the infection process. As soon as the file is run, it opens the Flash file, which displays an animation accompanied by music, showing Santa Claus leaving presents in a Christmas tree against a red background, and runs the Trojan invisibly to users so that the computer becomes infected without the user realizing.

Once run, MerryX.A records information about the computer that -IP address, hardware data, etc- and sends it to a remote server. It also tries to download files from several web pages, which indicates that the Trojan could serve as an entry point for other malware specimens.

As result, i can tell you, don`t open attached files!

Trojan

Author: Myantispyware team

Myantispyware is an information security website created in 2004. Our content is written in collaboration with Cyber Security specialists, IT experts, under the direction of Patrik Holder and Valeri Tchmych, founders of Myantispyware.com.

Leave a Reply Cancel reply




New Guides

1FEAFBa5L496PsNHZLZ8UmAJqRkzefJ6Lq
1FEAFBa5L496PsNHZLZ8UmAJqRkzefJ6Lq Bitcoin Email Scam
Mderedpro.top
How to remove Mderedpro.top pop-ups (Virus removal guide)
Vercounsel.top
How to remove Vercounsel.top pop-ups (Virus removal guide)
igredownload.com
How to remove Igredownload.com pop ups (Virus removal guide)
Files encrypted with .pola extension
How to remove Pola ransomware, Decrypt .pola files.

Follow US

Search

Useful Guides

ads by adware
How to remove Adware from Windows 10 (Virus removal guide)
How to remove browser hijacker virus (Chrome, Firefox, IE, Edge)
Malwarebytes won’t install, run or update – How to fix it
remove chrome extension
How to remove Chrome extensions installed by enterprise policy
How to reset Internet Explorer settings to default

Recent Posts

Adware in exchange for videos and music in P2P
Free Jetico Personal Firewall for Windows 98/ME/NT/2000/XP
Santa IM Worm
Symantec AV RAR library vulnerability
Panda Antivirus for Linux

MYANTISPYWARE.COM

  • About Us
  • Contact Us
  • Privacy Policy

NEED A HELP ?

If you're seeing unwanted pop-ups or ads in your web-browser, you might have an adware installed on your computer. Use the following guide to stop pop-up ads and remove malicious software. Or ask for help here.

Links

  • Downloads
  • Instructions
  • Questions and Answers
  • Free Malware Removal Tools
Copyright © 2004 - 2020 My AntiSpyware - Free antispyware programs and Spyware Removal Instructions.