Discovered: January 30, 2009
Updated: February 3, 2009 12:52:43 AM
Type: Trojan
Infection Length: 68,816 bytes
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000
Infostealer.Nadebanker is a Trojan horse that creates a Browser Helper Object (BHO) and intercepts and modifies financial related traffic to steal confidential information.
Further Reading:
To find out more about Infostealer.Nadebanker, please read the Symantec Security Response blog entry:
Bankpatch and NadebankerProtection
-
Initial Rapid Release version January 30, 2009 revision 019
-
Latest Rapid Release version October 6, 2009 revision 050
-
Initial Daily Certified version January 30, 2009 revision 024
-
Latest Daily Certified version October 6, 2009 revision 038
-
Initial Weekly Certified release date February 4, 2009
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
-
Wild Level: Low
-
Number of Infections: 0 - 49
-
Number of Sites: 0 - 2
-
Geographical Distribution: Low
-
Threat Containment: Easy
-
Removal: Easy
Damage
-
Damage Level: Medium
-
Payload: Gathers information from the compromised computer.
Distribution
Writeup By: Stephen Doherty and Liam O Murchu