PornPass Manager infects computers with spyware
According to security analysts at MicroWorld Technologies, PornPass Manager promises to give unsuspecting victims free access to many adult Web sites and ezines from the shady side of World Wide Web. It seems a good enough offer for many to jump the gun; but it is just a facade.
In reality, the program drops masked Spyware programs like SpywareQuake and VirusBurst into the computer. PornPass Manager is very similar to the earlier pornographic password programs like X-Password Generator and MyPornMagPass. SpywareQuake and VirusBurst, the rogue security programs installed by PornPass Manager, are also identical to the ones installed by its predecessors.
While these programs are run, it clashes with explorer.exe and rundll32.exe and crashes them both, making it impossible to work on the computer. While installing PPM it drops a Codec and some additional scripts in the system as well.
The program will continuously show fake Virus alert messages like: “System is infected with Malware like backdoors that allow the remote attacker to perform various malicious actions. Click on the balloon to download malware removal software.”
PornPass Manager also creates two icons on the desktop named ‘Online Security Guide’ and ‘Security Troubleshooting’ which lead to links to certain Web sites and installs a browser hijacker called Smitfraud.
“PornPass Manager is a reflection of the increasing use of social engineering tactics in every channel of malware proliferation,” observes Sunil Kripalani, vice-president, global sales and marketing, MicroWorld Technologies.