Content

PWS-Maran

Type
Trojan
SubType
Password Stealer
Discovery Date
01/05/2007
Length
Minimum DAT
4933 (01/05/2007)
Updated DAT
5216 (01/25/2008)
Minimum Engine
5.1.00
Description Added
01/05/2007
Description Modified
01/08/2007 10:57 PM (PT)
Risk Assessment
Corporate User
Low
Home User
Low

Tab Navigation

Characteristics

PWS-Maran is a password stealing trojan which is registered as a service by its dropper. Please refer to description of PWS-Maran.dr for more details.

Symptoms

Please refer to description of PWS-Maran.dr.

Method of Infection

Trojans do not self-replicate. They are spread manually, often under the premise that the executable is something beneficial. Distribution channels include IRC, peer-to-peer networks, newsgroup postings, email, etc.

Removal

AVERT recommends to always use latest DATs and engine. This threat will be cleaned if you have this combination.

Additional Windows ME/XP removal considerations

Variants

Variants

    N/A

All Information

Overview -

PWS-Maran is a password stealing trojan which is registered as a service by its dropper.

This is a trojan detection. Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.

Aliases

  • Troj/Maran-Gen (Sophos)
  • Trojan-PSW.Win32.Maran.ba (Kaspersky)

Characteristics

Characteristics -

PWS-Maran is a password stealing trojan which is registered as a service by its dropper. Please refer to description of PWS-Maran.dr for more details.

Symptoms

Symptoms -

Please refer to description of PWS-Maran.dr.

Method of Infection

Method of Infection -

Trojans do not self-replicate. They are spread manually, often under the premise that the executable is something beneficial. Distribution channels include IRC, peer-to-peer networks, newsgroup postings, email, etc.

Removal -

Removal -

AVERT recommends to always use latest DATs and engine. This threat will be cleaned if you have this combination.

Additional Windows ME/XP removal considerations

Variants

Variants -

    N/A