Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Troj/PWSSagi-B

Feb 9, 2004 1:31AM PST

Type
Trojan

Description
Troj/PWSSagi-B is a password stealing Trojan that targets users of the Yahoo! Messenger service. Dropped files may have any of the filenames from the following list:
regsvr.exe
spool_32.exe
svchost .exe
winzip_32.exe
MsTask .exe
winzip_try.exe
spoolsvr.exe
ExpIorer.exe
taskmgr_32.exe
system_32.exe
intranet.exe
norton.exe
regclean.exe
starter .exe
iexpIore.exe
regscan_32.exe
osa .exe

http://www.sophos.com/virusinfo/analyses/trojpwssagib.html

Discussion is locked