Infostealer.Menghuan

Risk Level 1: Very Low

Printer Friendly Page

Discovered: June 30, 2005
Updated: February 13, 2007 12:53:27 PM
Also Known As: PWSteal.Menghuan
Type: Trojan Horse
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP


Infostealer.Menghuan is a password-stealing Trojan horse that attempts to steal passwords for the game, Menghuan Xiyou Online. The Trojan also attempts to log keystrokes entered into a Web form on the 163.com domain and sends the stolen information to a predetermined email address.

NOTE : Definitions prior to May 10, 2006 may detect this threat as PWSteal.Menghuan

Protection

  • Initial Rapid Release version June 30, 2005
  • Latest Rapid Release version October 3, 2009 revision 037
  • Initial Daily Certified version June 30, 2005 revision 019
  • Latest Daily Certified version October 5, 2009 revision 040
  • Initial Weekly Certified release date July 6, 2005

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: Low

Writeup By: Masaki Suenaga
Search by name
Example: W32.Beagle.AG@mm
Windows 7
Windows Vista Security