Spoofer.Win32.Joel

Overview

Alias

spoof,

Category

Spoofer: To spoof is to forge your identity. Attackers use spoofers to forge their IP address (IP spoofing). The most common use of spoofing today is smurf and fraggle attacks. These attacks use spoofed packets against amplifiers in order to overload the victim's connection. This is done by sending a single packet to a broadcast address with the victim as the source address. All the machines within the broadcast domain then respond back to the victim, overloading the victim's Internet connection. Since smurfing accounts for more than half the traffic on some backbones, ISPs are starting to take spoofing seriously and have started implementing measures within their routers that verify valid source addresses before passing the packets.

Origins

Group

Joel Mello Inc.

Date of Origin

March, 2004

Detection and Removal

Manual Removal

Follow these steps to remove Spoofer.Win32.Joel from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.

Stop Running Processes:

Kill these running processes with Task Manager:

Remove Files:

Remove these files (if present) with Windows Explorer:

SpinAudioRoomVerbcracker SpiritMail Spoof Spoofer.ARP.Inject.01 Spoofer.ARP.Netxys Spoofer.Win32.Joel Spoofer.Win32.VB.c SpotOnBrowserplugin Spotonbh.dll SpyAnytimePCSpy