Know Your Malware: FireFly Removal

FireFly is a trojan designed to contact predetermined web servers in order to silently download and execute arbitrary, potentially malicious files or install other parasites. It can also provide the attacker with unauthorized remote access to a compromised computer allowing the intruder to control the system and steal user sensitive information. FireFly automatically runs as a service on every Windows startup.

Related files: serpent.exe, windebug.exe, delme.bat, fireflyinfo.ini

FireFly properties:
Allows remote user connection
Connects itself to the internet
Hides from the user
Stays resident in background Remove FireFly, removal instructions

Linked by shanmuga Thursday, 15th December 2005 12:31AM