[Summary]

Trojan/Dropper.W32.PCSafe.N1.A does not spread by itself, but exists as a compressed execution form or installer form and installs spyware or malware internally when a dropper is executed.

[Propagation]

Trojan/Dropper.W32.PCSafe.N1.A does not spread by itself, but spreads through other malware.

[Symptoms]

Trojan/Dropper.W32.PCSafe.N1.A exists in the form of a installation file and creates spyware or logware internally when a dropper is executed.

Although it is used to create many file viruses, trojans and downloaders, it is most recently being used to create password stealers to leak sensitive personal information.

Trojan-Droppers mostly serve to install other malware.

[Reference Information]

- (Drive Root) refers to the upper-most folder. (ex. C:\, D:\).

 

- In Windows, (Program Folder) generally refers to C:\Program Files

- (User Temporary Folder) generally refers to C:\Documents and Settings\(User Account)\Local Settings\Temp.

- (Windows Folder) generally refers to C:\WINDOWS in Windows 95/98/ ME, to C:\WINNT in Windows 2000/NT, and to C:\WINDOWS in Windows XP/2003/Vista.

- (Windows System Folder) generally refers to C:\WINDOWS\SYSTEM  in Windows 95, 98, ME, to C:\WINNTSYSTEM32 in Windows 2000, NT, and to C:\WINDOWSSYSTEM32  in Windows XP/2003/Vista.

- BHO (Browser Helper Objects) refers to the DLL module added onto the Internet Explorer as a plug-in, and the added module executes when the Internet Explorer is run.

[Repairing with nProtect Netizen / nProtect Personal]

1. Run the product and clik on the ON-SCAN button by the top.
2. Check on all the files in Settings and click on the Scan Now button.
3. If a malware is detected through the scan, click on the Yes button in the Treatment Option Window.
4. Check if the malware has been successfully repaired.

[Repairing with nProtect Anti-Virus/Spyware 2007 / nProtect GameGuard Personal 2007]

1. Run the product and update the engine and patch file to the latest version. (Using the main window, tray icon, or start menu)
2. Select the Virus/Spyware tab and click on the Scan Now button.
3. If a malware is detected through the scan, click on the Repair button.
4. Check if the malware has been successfully repaired.