It seems that virus writers have created a Trojan that, in addition to harvesting data, deletes illicit files such as warez and porn from infected machines. Called “Erazer-A” (how appropriate!), the malware spreads across P2P networks, where it poses as useful program files. If executed, it scours folders used for P2P applications and erases matching file types (AVI, MP3, MPEG, WMV, GIF, ZIP and other files) in the P2P directories before dropping copies of itself in the shared folder using names like game.exe, goporn.exe, nero7.exe and officexpcrack.exe.
Erazer-A also turns off security applications running on the compromised machine. To find out how to defend against it and protect your hard-earned smut, check out the analysis by antivirus firm Sophos.
