Google Adsense Trojan Stops Riding

In December TechShout.com had reported a malicious program, which was hijacking Google AdSense ads after downloading itself onto an unsuspecting computer through an infected webpage. When the ad links were clicked, the malicious program forwarded the user to a page that was filled with text link ads. However the latest update is that none of the hijacked links appear any longer, raising a doubt - is this the end of the Trojan program or is it taking just a temporary Sabbath?

Raoul Bangera, who discovered the Trojan and is working with Google to resolve the issue says, "As for now, the Trojan seems to have stopped churning out the fake ads." He continues, "Either the code may not be functioning correctly or the people behind this have closed shop."

Though Bangera was surfing the web through the Internet Explorer on a Windows Operating System, when his computer was infected; its effects on other Operating Systems is still unknown. Apparently once the system is infected, the hijacked ads were visible on and operated similarly in the IE as well as the Firefox browser.

When TechShout.com asked Bangera whether Google has resolved the issue, he said, "My recent telephonic conference with Google engineers who are working on this case makes it quite clear that they are close to eradicating the problem. With the help of the log files provided to Google, they have been successful in accurately determining the culprit files causing the problem."

Google often receives complaints from publishers about the ads not being in sync with the contents of the page. Some of the complaints could probably be the work of this type of Trojan.

There have also been reports of this Trojan having been circulated via file sharing P2P networks. About this matter, Google engineers stated, "This is possible since the usual trend employed by virus developers to circulate a virus quickly is to infect a file with the virus and then spread it through various file-sharing networks. This further makes it unlikely for anyone to identify the source of the virus since it would be difficult to detect the particular file carrying the virus."

So far none of the Antivirus programs have been successful in detecting this Trojan. Hopefully, Raoul Bangera says, Google will soon come out with a set of instructions to help detect and remove the Trojan.

Related Articles

• SCO Exhibits MySQL on SCO OpenServer and Digital Services Leadership at Retail Industry's Largest Show
  Tuesday, 17 January 2006



• Apache Declares Cash Dividends on Common and Preferred Shares
  Sunday, 1 January 2006



• Boeing Delivers First Apache Combat Helicopter for Japan and Lockheed Martin Prepares to Deliver Two More New C-130J Aircraft
  Tuesday, 27 December 2005



• Run Your Own Web Server Using Linux & Apache -- SitePoint's Latest Release
  Sunday, 18 December 2005



• Alcatel Selects MySQL Cluster for its Multi-Access Data Server Platform
  Monday, 5 December 2005



• SCO Partners With MySQL AB
  Sunday, 4 September 2005



• "MySQL in a Nutshell": New Quick Reference Leads to Faster, More Productive Queries
  Sunday, 15 May 2005



• MySQL CEO Marten Mickos to Present Next Wave of Affordable Database Adoption at the MySQL Users Conference
  Wednesday, 20 April 2005



• Embarcadero Technologies Offers Most Comprehensive Data Lifecycle Management Solution for MySQL Network
  Tuesday, 19 April 2005



• 2004-2005 MySQL Partner Awards
  Wednesday, 30 March 2005



• MySQL Manager 3 Immediately Available
  Friday, 18 March 2005



• Dot Hill Systems Corp. and MySQL AB Join Multivendor Support Alliance
  Thursday, 3 March 2005



• Google Hack Honeypot v1.0 is Released
  Saturday, 19 February 2005



• Guardian Digital's Secure Mail Suite Protects ISP's from Trojan Zombie Attacks
  Sunday, 13 February 2005



• MySQL Appoints Mark Burton Executive Vice President of Worldwide Sales
  Sunday, 30 January 2005