W32/Scar-H is the new name for virtual world security threats that will pin-down your Windows PC into submission. This new Windows PC virus spotted by Sophos is capable of replacing each .exe file present in your computer's C: drive (generally this is the drive having Windows system files) with a copy of its own. W32/Scar-H Windows virus worm is also known by other alias names like Trojan.Win32.Scar.bxrc, TR/Scar.bxrb, Trojan:Win32/Spawnt.A and Scar.gen.j.
# How does W32/Scar-H creep into your Windows PC
The virus first installs itself into the Windows registry entry and substitutes Drwtson32.exe (application debugger program), and thereafter prompts your Windows OS to create multiple instances of W32/Scar-H process. This continues till your Windows system is pinned into unresponsiveness.
# Final assault by W32/Scar-H
Image
Once the malware has dropped the ammunition it goes a step further by rebooting your Windows PC, and thereafter displaying a message:
Windows was unable to start as the \system32\ntoskrnl.exe file is corrupt or absent
Then it displays a message to reinstall the .exe file, thereby notifying that virus worm W32/Scar-H has successfully substituted the ntoskrnl.exe file.
# How does it spread
Image
W32/Scar-H is primarily spreading via removable storage devices and network sharing nodes, so you should be on your toes while accessing such domains.
# Security measures to take
Image
Since this virus has been discovered by security firm Sophos, they have the virus definition update for this malware. I would advice a full system scan using the Sophos Threat Detection Test tool that can be downloaded at the parent website. You have to get the copy of actual .exe file (in some cases) after restoring to a backup data or after installing the relevant application/program.
# Consequences if ignored
Image
W32/Scar-H has been specifically designed to tamper the .exe files on your Windows PC, so that would mean each and every executable program on your PC will be devoured. The same goes with Windows system files; therefore too much exposure of W32/Scar-H duplicate files on your Windows PC can corrupt your copy of Windows.
# Future implication of the threat
Image
W32/Scar-H is a malware that operates in a very niche matter, so it could pave way for even more destructive virus, worms and Trojans. Although for now the virus is only programmable for Windows PC, in future it may be coded to operate on other operating systems like Mac OS X. Moreover, pro as well as budding hackers can improve on the existing coding of this malware program to come-up with even more dangerous virus programs.
www.keralites.net |
__._,_.___
No comments:
Post a Comment