Genetik

Genetik is the latest parasite which comes in the form of Trojan horse.

Genetik is actually a trick application, it will covertly enter a system and is specifically designed to download and execute remote files, whist also redirecting the user’s browser.

Genetik has a few aliases, namely:
- gamevancelib32.dll
- pmropn.exe

When investigated, Genetik appears to be a nearly perfect virus. Genetik may self-protect, could monitor the infected system’s memory, might randomly name its affiliated malicious files, and also tends to integrate with Windows Operating systems’ critical processes.

The following properties are displayed by this malicious software application:

* Adds a Registry Key (RUN) to auto start Programs on system start up
* Uses Rootkit techniques to conceal its presence, interrogation or removal
* Found on infected systems and resists interrogation by security products
* Created as a process on disk
* The process is hooked into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
* Registered as a Dynamic Link Library File
* Deleted as a process from disk
* Creation and Registered as a Browser Helper Object in Internet Explorer
* Enabled as an In Process Object/Server - Common with DLL Injections

The first sign that a system is infected with Genetik would be the fact that is capable of terminating Antivirus applications, firewalls, and other security related applications. Genetik will also show characteristics of an identified security risk.

The threat of this particular parasite, Genetik, is not to be taken lightly, as Genetik is highly capable of severely compromising a computer system and may even result in system failure if not entirely removed from the infected system.