Alanchum.L is a Trojan, which although seemingly inoffensive, can actually carry out attacks and intrusions.
It affects productivity, preventing tasks from being carried out:
- In the affected computer:
downloads or drops other malware on the computer: TaskdirHide.
- In the local network:
it generates a large amount of network activity and consumes bandwidth.
- On remote sites: it mass mails junk mail (spam).
It uses stealth techniques to avoid being detected by the user:
- It uses several third-party rootkits to hide the items it introduces on the affected computer.
It uses several methods in order to avoid detection by antivirus companies:
- It prevents scanning tools from running, such as Windows Registry Editor, FileMonitor, etc.
Alanchum.L does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, email messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc.