Home Malware Programs Trojans Trojan-Spy.Win32.Dibik.fnz

Trojan-Spy.Win32.Dibik.fnz

Posted: February 24, 2011

Trojan-Spy.Win32.Dibik.fnz is a Trojan keylogger that spies on your keyboard input and other computer data for the purposes of releasing that information to remote third parties. Some sources have also reported Trojan-Spy.Win32.Dibik.fnz being able to modify system files, block security programs and security-affiliated websites, create fake alerts and use networks to spread. Even if this Trojan is 'only' a keylogger, this threat is sufficiently invasive that you should delete Trojan-Spy.Win32.Dibik.fnz with great haste.

A Program That Records Information It Has No Right To

The Trojan-Spy.Win32.Dibik.fnz Trojan's first and foremost ability is to be a keylogger - Trojan-Spy.Win32.Dibik.fnz records all individual keystrokes from your keyboard, just in case you type a juicy password or account login. Remote attackers use this information to make fraudulent charges or enact identity theft. All files and all information on your system are at risk if Trojan-Spy.Win32.Dibik.fnz's infecting it.

The level of security you think you have active and installed on your system doesn't necessarily give you any greater safety. Once Trojan-Spy.Win32.Dibik.fnz infected a computer, Trojan-Spy.Win32.Dibik.fnz can lower security to allow it to produce outbound traffic towards the criminal hacker. This may extend to directly preventing security programs from running. Some reports have indicated that Trojan-Spy.Win32.Dibik.fnz can even stop you from browsing a security-based website!

And Unfortunately, That's Not All

The security and spying issues are quite unpleasant enough, but Trojan-Spy.Win32.Dibik.fnz may not stop there. Other reports have indicated a wide possible range of attacks on infected computers, with the prominent possibilities shown below.

  • Trojan-Spy.Win32.Dibik.fnz may modify files to prevent specific programs from running, or simply to induce panic or damage the system directly.
  • The Trojan-Spy.Win32.Dibik.fnz Trojan may also have worm-like propagation abilities, with the capability of spreading to new computers through network exploits
  • .

  • Some sources have also reported that Trojan-Spy.Win32.Dibik.fnz is able to create fake taskbar-based errors and alerts for the purposes of confusing and frightening the user.

This rainbow of hostile effects means that Trojan-Spy.Win32.Dibik.fnz may be very noticeable if Trojan-Spy.Win32.Dibik.fnz chooses to be directly aggressive. On the other hand, if Trojan-Spy.Win32.Dibik.fnz stays quiet and keylogging, you may never see the damage until all your confidential information has been leaked out into the world. No matter what attacks this Trojan ends up using, speedy deletion of Trojan-Spy.Win32.Dibik.fnz is required, not just for the sake of your computer, but also for the sakes of anyone who uses it.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Windir%\DBS.EXE

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DBSHKEY..\..\..\..{RegistryKeys}Description = "DBSRemote"DisplayName = "DBS_Server"ErrorControl = 0x00000000HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DBS_ServerHKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DBS_Server\SecurityHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DBS_ServerHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DBS_Server\SecurityImagePath = "%Windir%\DBS.EXE"InstallTime = "2011-2-23 0:46:45"ObjectName = "LocalSystem"Start = 0x00000002Type = 0x00000110
Loading...