<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	>

<channel>
	<title>S&#038;H Systems</title>
	<atom:link href="http://sandhsystems.co.uk/blog/feed/" rel="self" type="application/rss+xml" />
	<link>http://sandhsystems.co.uk/blog</link>
	<description>http://www.sandhsystems.co.uk - PC Security Related Blog</description>
	<pubDate>Fri, 02 Jan 2009 11:53:21 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.7</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Emogen.B</title>
		<link>http://sandhsystems.co.uk/blog/2009/01/02/emogenb/</link>
		<comments>http://sandhsystems.co.uk/blog/2009/01/02/emogenb/#comments</comments>
		<pubDate>Fri, 02 Jan 2009 11:39:49 +0000</pubDate>
		<dc:creator>sandhsystems</dc:creator>
		
		<category><![CDATA[Viruses]]></category>

		<guid isPermaLink="false">http://sandhsystems.co.uk/blog/?p=4</guid>
		<description><![CDATA[Emogen.B Is a backdoor Trojan

]]></description>
			<content:encoded><![CDATA[<p>Is a backdoor Trojan that connects to a server and lets<br />
attackers take control of the targeted computer remotely. They will then<br />
be able to monitor system activities and take actions such as<br />
downloading malware, stealing user information, controlling the Command<br />
Prompt window remotely and even starting a chat session with the<br />
infected user.</p>
<p>This backdoor Trojan cannot spread automatically, but uses the usual<br />
means of propagation: P2P networks, physical devices such as CDs or<br />
floppy disks, Internet downloads or FTP file transfers.</p>
]]></content:encoded>
			<wfw:commentRss>http://sandhsystems.co.uk/blog/2009/01/02/emogenb/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Manclick.A Internet Worm</title>
		<link>http://sandhsystems.co.uk/blog/2008/02/08/manclicka-internet-worm/</link>
		<comments>http://sandhsystems.co.uk/blog/2008/02/08/manclicka-internet-worm/#comments</comments>
		<pubDate>Fri, 08 Feb 2008 23:16:06 +0000</pubDate>
		<dc:creator>sandhsystems</dc:creator>
		
		<category><![CDATA[Viruses]]></category>

		<guid isPermaLink="false">http://sandhsystems.co.uk/blog/2008/02/08/manclicka-internet-worm/</guid>
		<description><![CDATA[Manclick.A is a worm that installs on computers under the guise of a Windows folder. When this worm is run, it passes itself off as the web page of the Google search engine. The appearance of this page is very similar to the original one and the results, if a user were to click them, [...]]]></description>
			<content:encoded><![CDATA[<p><font size="2">Manclick.A is a worm that installs on computers under the guise of a Windows folder. When this worm is run, it passes itself off as the web page of the Google search engine. The appearance of this page is very similar to the original one and the results, if a user were to click them, could lead to malicious websites that download malware or take other malicious action.</font><font size="2">The worm creates several copies of itself on the system and it also creates two registry keys to ensure it is run every time the system is started up. Similarly, it deletes certain Windows registry keys to prevent the computer from starting up in any of the available save modes.</font><font size="2">Users who suspect that they have this worm are advised to visit any of the Antivirus links on this site and download a reliable antivirus program. </p>
<p></font></p>
]]></content:encoded>
			<wfw:commentRss>http://sandhsystems.co.uk/blog/2008/02/08/manclicka-internet-worm/feed/</wfw:commentRss>
		</item>
	</channel>
</rss>
