Weekly Spyware Alert: RapidBlaster
This nasty piece of code regularly downloads data from its controlling server to your PC, and then morphs itself into a new version and erases its tracks. Ouch.Aliases: rb32 (its executable name) Variants: RapidBlaster/v1 is the original version. RapidBlaster/lp is an update using a slightly different names. RapidBlaster/Ainst is an ActiveX installer used to load v1 or lp.
The most recent variants of RapidBlaster have been observed "morphing" themselves to evade detection. RapidBlaster periodically downloads data from its controlling server that contains a new folder and filename. It then copies itself to that folder, terminates the original process, deletes the original file, and runs the new file in the new location.