BEWARE: DVT release of Ad Aware 2007!!!

cicerone · 11-15-2007

This thing has appeared on RLSLOG- (so links may appear on forumw soon).

Do not download it or be very cautious if you do! it is infected with a password stealing trojan.
It isn't detected by many or all of the main AV apps at the moment.

Files planted by the installer in c:\windows:

Projekt1.exe
plds4.dll
softokn3.dll
FirePassword.exe
nspr4.dll
nss3.dll
plc4.dll

It will decrypt and steal any passwords stored in firefox...and send it straight to the hacker on the other end.

Shadab · 05-11-2008

Thanks for the info.

Won't affect me much. As I had stopped storing passwords in Firefox 2-3 months ago.
( after _this_ incident )

Similar topic at mozilla.com :
FirePassword.exe what is it

simon4u92 · 05-24-2008

woo...thanks for the info man

11-15-2007	#1
cicerone Newbie Join Date: Nov 2007 Posts: 22	BEWARE: DVT release of Ad Aware 2007!!! This thing has appeared on RLSLOG- (so links may appear on forumw soon). Do not download it or be very cautious if you do! it is infected with a password stealing trojan. It isn't detected by many or all of the main AV apps at the moment. Files planted by the installer in c:\windows: Projekt1.exe plds4.dll softokn3.dll FirePassword.exe nspr4.dll nss3.dll plc4.dll It will decrypt and steal any passwords stored in firefox...and send it straight to the hacker on the other end.

05-11-2008	#2
Shadab Web Developer Join Date: Feb 2007 Location: Bhopal Posts: 2,746 iTrader: 100% (1)	Thanks for the info. Won't affect me much. As I had stopped storing passwords in Firefox 2-3 months ago. ( after _this_ incident ) Similar topic at mozilla.com : FirePassword.exe what is it My periodic table contains only 1 element : the element of Surprise.

05-24-2008	#3
simon4u92 Newbie Join Date: Oct 2007 Location: Vizag, India Posts: 38	woo...thanks for the info man