Aliases: N/A
Variants: N/A

Classification: Malware
Category: Trojan Horse

Status: dormant
Spreading: slow
Geographical info: Europe, North and South America, and some parts of Asia and Australia
Removal: Easy
Platform: W32
Discovered: 05 Apr 2001
Damage: Low

Characteristics: The W32.BrainProtect program is just a simple mIRC script-dropping Trojan horse. It tends to replicate itself as a different, malicious program or file.

More details about W32.BrainProtect

This program is just a simple mirc script-dropping Trojan horse. It names itself as C:\Pinkycerebro.scr. Consequently, it also creates the file \Mirc\Mirc.hst and it also changes Mirc.ini file by appending a certain string at the end if the file, thus composing, “n=mirc.hst.” If you can see strings or files such as this one, then the virus is present in your computer. The virus will push the Mirc.exe to show in the contents of Mirc.hst script file. The W32.BrainProtect program has the ability to man the user's machine without his consent. It is also not easy to detect for it has the ability to hide itself, making the user think that there is no virus lurking around his system. However, there are also times when the user can clean it out and make the program be deleted. However, the program would still remain there as soon as the user reboots his system.

The first step that this program does is to download and install certain files by using the Internet. As these files have been retrieved, it will now be put inside the system folder. These files are normally seen in websites like blogs and other related websites. The W32.BrainProtect program executes the hacking as soon as it places the user on these certain websites and making him download the application. It will continue doing so and the user will not be able to detect this certain activity.