Trojan.AOL.Buddy(Also known as Penny Tools Trojan)

This is a password stealing trojan. This trojan is installs itself in several different places, making removal difficult. The trojan modifies:

The trojan also creates VCLCNTL.DLL in C:\Windows\System\. When Windows starts the trojan also starts (one of the above mentioned steps) and remains active. It sends the user's AOL login and password via email to (qware4019@hotmail.com) or (ha015312@hotmail.com) depending on the trojan version.


Last updated: Friday, 23-Aug-2002 11:51:02 EDT