trojan.PWS.Alanchum

Type:
Trojan with Rootkit capabilities

What It Does:

1. Adds itself to your computer's registry so that the infection runs when Windows starts.
2. Adds the files Taskdir.dll, Taskdir.exe and zlbw.dll to your system directory.
3. Downloads and executes remote files.
4. Can send information about the compromised computer to a remote destination.
5. May be used to relay spam emails.
6. Alanchum can disable your antivirus software, or crash a scanner once one of the infected files is touched.

How It Infects:
Trojan.PWS.Alanchum may be distributed by means such as:

1. Email attachments
2. Instant message attachments
3. Infected websites
4. Hyperlinks to infected websites from email or instant messages
5. Downloading by other malware
6. Through peer-to-peer networks

Vulnerable Operating Systems:
Windows 95/98/Me/NT/2000/XP

Aliases:
Trojan.PWS.Alanchum
Trojan.Alanchum
Alanchum
Trojan.Abwiz.F
Troj/DwnLdr-AKR
Trojan.W32.Abwiz
Win32/TrojanProxy.Lager.AQ
Trojan.Taskdir

How To Avoid Infection:
Do not download unknown files or files from unknown sources. Do not click links in emails from unknown or suspicious sources. Scan all downloaded files with StopSign before running them. Ensure your computer has all critical updates from Microsoft Windows Update.