
ECAR
D.EXE PROCESS INFORMATION
Process
Name : ecard.exe
Process
type : Trojan
Malware
Name : Trojan.Spy.Win32.Zbot.Wvl
Alias : Pakes.DUQ,
W32/Trojan3.AZA, PWS:Win32/Zbot.PO, Win32/Spy.Zbot.JF,
Troj/Agent-KGA, Trojan-Spy.Win32.Zbot.gen
Threat
level :
Low
Process
Details
Ecard.exe is
infected with Trojan.Spy.Win32.Zbot.Wvl trojan
and it is spammed
via e-mail. It usually arrives with attachment ecard.exe
or a download link to ecard.exe
The
infected mail subject will be
You
have received an Greeting eCard
The
infected mail message body will
be
Good
day.
You have received an eCard
To pick up your eCard, choose from any of the
following options:
Click on the following link (or copy & paste
it into your web browser):
http://megamindonline.com/ecard.exe
Your card will be aviailable for pick-up
beginning for the next 30
days.
Please be sure to view your eCard before the days
are up!
We hope you enjoy you eCard.
Thank You!
When the infected e-mail
attachment is executed, it copies to Windows
system folder and modifies the registry to load
automatically on next startup.
It also download and
installs serveral malicious files in the infected
system. This trojan is also known as Pakes.DUQ, W32/Trojan3.AZA,
PWS:Win32/Zbot.PO, Win32/Spy.Zbot.JF, Troj/Agent-KGA,
Trojan-Spy.Win32.Zbot.gen. Trojan.Spy.Win32.Zbot.Wvl
variant appeared on 20th June 2009.
How can I protect my
system?
Solo has incorporated
ecard.exe in its signature file to protect users
from this trojan attack. Solo antivirus
registered users are already protected from this
trojan. Make sure that you have installed
registered version of Solo Antivirus to protect
your system from all virus threats.
How
to remove this Trojan?
If
you are already infected with ecard.exe,
you can remove it from your computer using Solo
Antivirus software. Use the
following link to Download 30 day trial
version of Solo antivirus to remove
viruses from your computer.

Solo anti-virus not only
scans for all viruses, it contains a unique System
Integrity Checker to protect you from
New Internet Worms, Backdoors and
malicious VB, Java Scripts. It also
effectively removes all existing Internet Worms,
File viruses, malicious VB, Java scripts, Trojans,
Backdoors, boot sector, partition table and macro
viruses.
You can
purchase Solo antivirus using the link 

|