VIRUS ALERTS - December 26, 2005

Type Trojan

Aliases Backdoor.Win32.Robobot.az
DDoS-Boxed

Troj/Borobot-V is an IRC backdoor Trojan for windows platform.

http://www.sophos.com/virusinfo/analyses/trojborobotv.html

Type Trojan

Troj/Small-FS is a Trojan for the Windows platform.
Troj/Small-FS includes functionality to access the internet and communicate with a remote server via HTTP.

http://www.sophos.com/virusinfo/analyses/trojsmallfs.html

Type Trojan

Aliases Trojan-Downloader.Win32.Harnig.ax

Troj/Dloadr-AH is a Trojan for the Windows platform.
Troj/Dloadr-AH includes functionality to access the internet and communicate with a remote server via HTTP.

http://www.sophos.com/virusinfo/analyses/trojdloadrah.html

Type Spyware Worm

Aliases Backdoor.Win32.Rbot.alk
W32/Sdbot.worm.gen.ae

W32/Rbot-BFV is a network worm with backdoor Trojan functionality for the Windows platform.
W32/Rbot-BFV spreads using a variety of techniques including:
-exploiting weak passwords on computers and SQL servers
-exploiting operating system vulnerabilities
-using backdoors opened by other worms or Trojans.
W32/Rbot-BFV can be controlled by a remote attacker over IRC channels. The backdoor component of W32/Rbot-BFV can be instructed by a remote user to perform the following functions:
start an FTP server
start a Proxy server
start a web server
take part in distributed denial of service (DDoS) attacks
log keypresses
capture screen/webcam images
packet sniffing
port scanning
download/execute arbitrary files
start a remote shell (RLOGIN)
steal product registration information from certain software

http://www.sophos.com/virusinfo/analyses/w32rbotbfv.html

Type Spyware Worm

Aliases Backdoor.Win32.IRCBot.az

W32/Rbot-BFU is a network worm with backdoor Trojan functionality for the Windows platform.
W32/Rbot-BFU spreads using a variety of techniques including:
-exploiting weak passwords on computers and SQL servers
-exploiting operating system vulnerabilities
-using backdoors opened by other worms or Trojans.
W32/Rbot-BFU can be controlled by a remote attacker over IRC channels. The backdoor component of W32/Rbot-BFU can be instructed by a remote user to perform the following functions:
start an FTP server
start a Proxy server
start a web server
take part in distributed denial of service (DDoS) attacks
log keypresses
capture screen/webcam images
packet sniffing
port scanning
download/execute arbitrary files
start a remote shell (RLOGIN)
steal product registration information from certain software

http://www.sophos.com/virusinfo/analyses/w32rbotbfu.html

Type Trojan

Aliases Trojan-PSW.Win32.VB.fu
PWS.g

Troj/HazifKit-B is a tool for creating password-stealing Trojans.
Trojans produced using this tool are detected as Troj/Hazif-C.

http://www.sophos.com/virusinfo/analyses/trojhazifkitb.html

Type Trojan

Troj/Agent-IH is a Trojan for the Windows platform.
Troj/Agent-IH will harvest email addresses from the infected computer and report them to a remote URL.
Troj/Agent-IH may inject code into running processes in order to avoid detection.

http://www.sophos.com/virusinfo/analyses/trojagentih.html

Type Spyware Trojan

Aliases PWS-Banker.gen.t

Troj/Iyus-P is a password stealing Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojiyusp.html

Type Spyware Trojan

Aliases Trojan-PSW.Win32.Agent.an

Troj/Agent-HZ is a password stealing Trojan for the Windows platform.
Troj/Agent-HZ has the functionalities to:
- steal email server passwords
- send notification messages to remote locations
- access the Internet and communicate with a remote server via HTTP

http://www.sophos.com/virusinfo/analyses/trojagenthz.html

Type Spyware Trojan

Aliases Trojan-PSW.Win32.Lmir.kn
W32/Legendmir.FJ

Troj/LegMir-CN is a password stealing Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojlegmircn.html

Roddy;

I have been tracking your "virus alerts" and downloading IDE's. They are all Sophos.

Since I am not running Sophos AV, their tech support tells me that don't support other AV programs.

So are these IDE's any good to my AVG program?