Marioforever.exe ... variant of backdoor.zapinit?

Norton Security | Norton Internet Security
1

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

2

Has anyone else seen this? This appears to have originated on the 24th. A file called marioforever.exe is detected by SAV CE 10.1.7 as a generic backdoor.trojan. Also appearing are files in the windows spooler folder that get sent as junk to shared printers (you can stop this by restricting printing to domain users). I haven't seen anything from Symantec or any other AV vendors on this, but have seen a couple of threads on Experts Exchange and Major Geeks saying it's a variant of backdoor.zapinit. I can't tell any exploit this thing takes advantage of, other than it gets removed and keeps popping back up.

 

Any info or shared experiences would be appreciated.

 

thanks in advance

 

3

Question.

Where you able to get it of of your machine?