Be careful on help files
Be careful on help files @ McAfee Labs Blog
“Muster” is a family of backdoor which has been using help files for hiding themselves. The help files or “.hlp” files are data files designed to be viewed with Microsoft WinHelp browser for providing online helps for applications users. Earlier variants of “Muster” drop encoded copies of main backdoor components in filenames with the extension “.hlp”. These “.hlp”files are later decrypted with Microsoft CryptAPI with hardcoded keys and executed by loaders.
You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.
