A New Threat to Internet Explorer Users

Here is an alert to an especially dangerous spyware keylogger that affects Internet Explorer users. The spyware keylogger, named Srv.SSA-KeyLogger, is a backdoor program that, among other things, secretly steals data from users' internet sessions, including logins and passwords from online banking sessions, eBay, PayPal, and other programs that use html forms to collect personal information. It is a new variant of a family of existing trojans generally known as Dumaru or Nibu.

This spyware is especially dangerous to anyone who uses the Auto Complete feature in Internet Explorer. When the AutoComplete feature of Internet Explorer is enabled (as it is by default), the Microsoft browser automatically remembers usernames and passwords entered in forms, and records them in Protected Storage. Although the data there is encrypted, simple utilities can easily decrypt the information. The Srv.SSA-KeyLogger extracts that data.

Read more about this spyware here and get a free detection and deletion tool here.