Win32.Memwatch (CA.com)

Description Published: January 30, 2005
Description Modified: January 30, 2005

Characteristics

Category:          Win32
Also known as: Win32.Memwatch.A, Win32.Memwatch.B, Troj/MemWatch-B (Sophos),
                          Adware-MemWatcher (McAfee) ,
                          Downloader-NY (McAfee),
                          Win32/Raquad.B!Trojan, TrojanDownloader.Win32.VB.em (Kaspersky),
                          TrojanDownloader.Win32.VB.em (Pest Patrol)

Description
Win32.Memwatch is a trojan that can download arbitrary files, and goes to great lengths to make itself difficult to remove from an affected system. Its main purpose is to display advertisements, and it is often installed along with ˝ad supported freeware˝. In these cases it usually creates an uninstall entry in the ˝Add or Remove Programs˝ Control Panel applet, however this entry does not remove the Memwatch trojan. The trojan will continue to display advertisements and download files.

More information on CA Virus Information Center:
http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=41597

Computer Associates – the Trusted Source of Security Knowledge