McAfee > Theat Center > Virus Detail Page

Overview

This is a trojan detection. Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.

Aliases

• Hide Minimized.dr

• W32.Friendgreet.worm

• WORM_FRIENDGRT (Trend)

Characteristics

AVERT has reclassified a component that gets installed by the Friend Greeting application as a trojan. This detection covers that component as well as its installer.

The 4235 DAT files detect this component as Hide Minimized trojan. Installer packages, which drop this trojan, are detected as Hide Minimized.dr trojan. This includes the various .CAB, and .MSI installers associated with the Friend Greeting application.

Symptoms

Presence of the Friend Greeting application.

Method of Infection

This trojan is installed when the Friend Greeting application is installed.

Removal

All Users:
Use the specified engine and DAT files for detection and removal.

In addition to the DAT version requirements for detection, the specified engine version (or greater) must also be used.

To remove the additional components that are commonly associated with this trojan, use the ADD/REMOVE Programs Control Panel in Windows to remove the WinSrv Reg application. Users may also wish to uninstall the Friend Greetings application as well.

Additional Windows ME/XP removal considerations

Variants

Variants

N/A

All Information

Overview -

This is a trojan detection. Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.

Aliases

• Hide Minimized.dr

• W32.Friendgreet.worm

• WORM_FRIENDGRT (Trend)

Characteristics

Characteristics -

AVERT has reclassified a component that gets installed by the Friend Greeting application as a trojan. This detection covers that component as well as its installer.

The 4235 DAT files detect this component as Hide Minimized trojan. Installer packages, which drop this trojan, are detected as Hide Minimized.dr trojan. This includes the various .CAB, and .MSI installers associated with the Friend Greeting application.

Symptoms

Symptoms -

Presence of the Friend Greeting application.

Method of Infection

Method of Infection -

This trojan is installed when the Friend Greeting application is installed.

Removal -

Removal -

All Users:
Use the specified engine and DAT files for detection and removal.

In addition to the DAT version requirements for detection, the specified engine version (or greater) must also be used.

To remove the additional components that are commonly associated with this trojan, use the ADD/REMOVE Programs Control Panel in Windows to remove the WinSrv Reg application. Users may also wish to uninstall the Friend Greetings application as well.

Additional Windows ME/XP removal considerations

Variants

Variants -

N/A