TROJ_ARTIEF.AEB

Posted: December 21, 2011

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	9/10
Infected PCs:	133

First Seen:	December 21, 2011
Last Seen:	May 30, 2022
OS(es) Affected:	Windows

TROJ_ARTIEF.AEB is closely-associated with BKDR_PCCLIEN.BQD, since TROJ_ARTIEF.AEB serves as the installation method or Trojan dropper for BKDR_PCCLIEN.BQD. TROJ_ARTIEF.AEB's partner will, after its own installation, open a backdoor on your PC via port 8000 so that it can receive files and instructions from a remote server. This remote access should be considered a high-level threat to your computer's security, since it can allow hackers to steal private information, install other PC threats or even control the behavior of other programs. TROJ_ARTIEF.AEB spreads itself to new computers by disguising itself as a file attachment that offers news about the death of North Korea's ruler, Kim Jong II. If you've opened similar types of file attachments, your PC may be in danger of infection by TROJ_ARTIEF.AEB even if you don't see any symptoms. In such cases, you should verify or debunk the possible presence of TROJ_ARTIEF.AEB and remove TROJ_ARTIEF.AEB by using trustworthy anti-malware products.

TROJ_ARTIEF.AEB: Exploiting National News to Infect Your PC

TROJ_ARTIEF.AEB is just one of multiple types of Trojans (such as TROJ_PIDIEF.EGQ) that are spread by mass e-mail messages that claim to contain information about the death of Kim Jong II. As a file attachment that appears to be in the popular .doc format, TROJ_ARTIEF.AEB doesn't, on first inspection, look very dangerous, and even uses a tantalizing file name: 'Kim_Jong_il___s_death_affects_N._Korea___s_nuclear_programs.doc.' However, these e-mail messages are mere spam and should be deleted as soon as they fall into your virtual mailbox.

If you open TROJ_ARTIEF.AEB's file attachment, your PC will be infected, not just by TROJ_ARTIEF.AEB, but also by BKDR_PCCLIEN.BQD, which TROJ_ARTIEF.AEB installs without your permission. These attacks are likely to show few symptoms, and thus, SpywareRemove.com malware experts note that preventing a TROJ_ARTIEF.AEB attack is easier than noticing one underway, although you can still detect and remove TROJ_ARTIEF.AEB with modern anti-malware software.

A Defense That Will Tend to All of TROJ_ARTIEF.AEB's Criminal Partners

Also, known by the aliases of Exploit-CVE2010-3333, Exploit:Win32/CVE-2010-3333 and Trojan.Mdropper.C, TROJ_ARTIEF.AEB should be detected and removed during a full system scan. Anything less than this may allow TROJ_ARTIEF.AEB or a related PC threat, such as BKDR_PCCLIEN.BQD, to duck under deletion. You may also need to disable System Restore or boot Windows into Safe Mode to completely-delete TROJ_ARTIEF.AEB. SpywareRemove.com malware researchers have found that, as of the time of this writing, non-Windows computers are safe from TROJ_ARTIEF.AEB attacks.

You may also wish to monitor your firewall and network ports for unusual activity. Backdoor Trojans that are installed by TROJ_ARTIEF.AEB are especially-known for using port 8000 but may also be configured to use different ports. Under normal circumstances, to insure the security and privacy of your PC, you should close ports that aren't in use by reputable programs. Failing to do this can allow criminal access to your computer even if TROJ_ARTIEF.AEB and its payload are uninstalled.

TROJ_ARTIEF.AEB

Threat Metric

TROJ_ARTIEF.AEB: Exploiting National News to Infect Your PC

A Defense That Will Tend to All of TROJ_ARTIEF.AEB's Criminal Partners

Leave a Reply