popcaploader Trojan - New shadow Variant Proves to be Tricky - TechRepublic
General discussion
March 29, 2009 at 08:27 AM
rxmillered

popcaploader Trojan – New shadow Variant Proves to be Tricky

by rxmillered . Updated 17 years, 3 months ago

popcaploader
Registry Keys Infected:
HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2 (Adware.PopCap)
HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2.1 (Adware.PopCap)

Hats Off to the new version of Malware Bytes that actually detects the trojan when others choose to ignore it.

However, Maleware Bytes will inform the user that it will be deleted on re-boot when that is not the case.

Interesting, this registry key shows up in RegEdit, but the Administrtor does not have the rights to view, remane, change rights, or delete it.

Several volunteer organizations exist to delete this. They require downloading an appliction, re-booting in Safe Mode. I have tried three of these with no success. Other suggestions such as CCleaner were also un-successful.

There is an indication that this security hole in SUN’s Java is proving to be tricky.

Anyone with suggestions, please respond.

This discussion is locked

All Comments