McAfee > Theat Center > Virus Detail Page

Overview

PWS-Maran.dll is the detection for a dll which is installed as a Layered Service Provider (LSP) to WinSock to sniff and steal personal information by PWS-Maran.dr.

This is a trojan detection. Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.

Aliases

• Troj/Maran-Gen (Sophos)

• Trojan-PSW.Win32.Nilage.ajf (Kaspersky)

• TSPY_MARAN.D (Trend Micro)

Characteristics

PWS-Maran.dll is the detection for a dll which is installed as a Layered Service Provider (LSP) to WinSock to sniff and steal personal information by PWS-Maran.dr. Please refer to the description of PWS-Maran.dr for more details.

Symptoms

Please refer to the description of PWS-Maran.dr.

Method of Infection

Trojans do not self-replicate. They are spread manually, often under the premise that the executable is something beneficial. Distribution channels include IRC, peer-to-peer networks, newsgroup postings, email, etc.

Removal

AVERT recommends to always use latest DATs and engine. This threat will be cleaned if you have this combination.

Additional Windows ME/XP removal considerations

Variants

Variants

N/A

All Information

Overview -

PWS-Maran.dll is the detection for a dll which is installed as a Layered Service Provider (LSP) to WinSock to sniff and steal personal information by PWS-Maran.dr.

This is a trojan detection. Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.

Aliases

• Troj/Maran-Gen (Sophos)

• Trojan-PSW.Win32.Nilage.ajf (Kaspersky)

• TSPY_MARAN.D (Trend Micro)

Characteristics

Characteristics -

PWS-Maran.dll is the detection for a dll which is installed as a Layered Service Provider (LSP) to WinSock to sniff and steal personal information by PWS-Maran.dr. Please refer to the description of PWS-Maran.dr for more details.

Symptoms

Symptoms -

Please refer to the description of PWS-Maran.dr.

Method of Infection

Method of Infection -

Trojans do not self-replicate. They are spread manually, often under the premise that the executable is something beneficial. Distribution channels include IRC, peer-to-peer networks, newsgroup postings, email, etc.

Removal -

Removal -

AVERT recommends to always use latest DATs and engine. This threat will be cleaned if you have this combination.

Additional Windows ME/XP removal considerations

Variants

Variants -

N/A