x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Encyclopedia GetVirusCard True 0

Webber

 
Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:Webber
Technical name:Trj/Webber
Threat level:Low
Type:Trojan
Effects:  It logs the keystrokes entered and captures the user's passwords. It opens two ports, allowing a hacker to gain remote access to confidential information.

Affected platforms:

Windows XP/2000/NT/ME/98/95

Detection updated on:July 18, 2003
StatisticsNo

Brief Description 

    

Webber is a dangerous Trojan that is spammed out via e-mail. When the file attached to the message is run, Webber is downloaded from a website.

Webber disables the option to save passwords in the browser Internet Explorer. By doing this, it forces the user to re-enter them. When the user does this, it logs the keystrokes entered, capturing the user's passwords, and saves them in three files.

Webber opens the ports 7714 and 8546, allowing a hacker that gained remote access to the affected computer to obtain the passwords it has saved.

Visible Symptoms 

    

Webber is easy to recognize, as it reaches computers through an e-mail message with the following characteristics:

Version 1:

  • From:
    Citibank Accounting
  • Subject:
    RE: Your credit application
  • Attachments:
    WEB.DA.US.CITI.HELOC.PIF

Version 2:

  • From:
    E-Loan Consumer Department
  • Subject:
    RE: Your E-Loan Refinance Application Declined
  • Attachments:
    E-LOAN-APPRAISER-RESULT.PIF