A few days ago, Microsoft announced that a team of researchers from within Malware Protection Center discovered a new one trojan, called TrojanDownloader:Win32/Nemim.gen!A, being capable of erasing itself downloaded malware files, so as not to be detected.
Microsoft specifies that this behavior of the Trojan makes it almost impossible isolating and analyzing files which he downloads, so that, even if downloaderul is detected types of malware downloaded cannot be identified (even if they are used recovery tools, files suspicious deleted cannot be restored).
Although most urls to which the downloader connects to download malware files are not currently available, Microsoft announced that it managed to identify two types of malware downloaded de TrojanDownloader:
- Virus:Win32/Nemim.gen!A, care infects executable files FROM external devices connected to the system (USB drives, sd cards and external hdds).
- PWS:Win32/Nemim.A, who tries to steal users' passwords infected computers from e-mail accounts set in system (SMTP, POP3, mail HTTP, IMAP) if the Windows Live Messenger, Google Talk, Google Notifier, Google Desktop.
Although the majority trojan downloaders they are only means to download malware files in order to infect systems, after which they are no longer necessary, if only the file is identified during a scan TrojanDownloader:Win32/Nemim.gen!A, Microsoft recommends users not only to delete the file respectively but also to change all the passwords of the accounts used on the respective computers, considering that this downloader also downloads (among others) a type of malware care fura parole.
As such, if you’re infected with TrojanDownloader:Win32/Nemim.gen!A, we recommend you change all account passwords after you’ve cleaned your system, as it’s likely you’ve also encountered PWS:Win32/Nemim.A.
STEALTH SETTINGS – Beware of new malware types: Microsoft found trojan that deletes itself
