Infostealer.Fender

Infostealer.Fender claims to be a tool to automate actions in the Diablo II game. However, the program actually emails Diablo II account details to a Hotmail address.

When Infostealer.Fender runs, it displays a configuration window that prompts you for account settings. After you click Start, the account details are mailed to a Hotmail address through Microsoft Outlook. Infostealer.Fender then attempts to launch the executable located at C:\Program Files\Diablo II\Diablo II.exe. If Diablo II has been installed to a custom folder or is not installed, you will see an error message.

NOTE : Definitions prior to May 10, 2006 may detect this threat as PWSteal.Fender