VIRUS ALERTS - December 30, 2005

Type
Trojan

Aliases
Backdoor.Win32.Delf.ald
Proxy-Raser

Troj/Jupdow-C is a Trojan for the Windows platform.

Troj/Jupdow-C attempts to download configuration files from a remote website to
the Windows temp folder, and may then attempt to download files from further
websites.

http://www.sophos.com/virusinfo/analyses/trojjupdowc.html

Type
Trojan

Aliases
Trojan.Win32.StartPage.agp
TROJ_STARTPAG.ZX
StartPage-IH

Troj/Paymite-H is a Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojpaymiteh.html

Type
Worm

W32/Sdbot-AIL is a worm for the Windows platform.

http://www.sophos.com/virusinfo/analyses/w32sdbotail.html

Type
Trojan

Troj/Riler-N is a Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojrilern.html

Type
Trojan

Troj/Raser-D is a Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojraserd.html

Type
Trojan

Troj/Ranck-DK is a Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojranckdk.html

Type
Trojan

Aliases
Downloader-AFM

Troj/DownLdr-NR is a downloader Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojdownldrnr.html

Type
Trojan

Troj/DownLdr-NQ is a downloader Trojan for the Windows platform. Troj/DownLdr-NQ downloads and installs software from the internet.

http://www.sophos.com/virusinfo/analyses/trojdownldrnq.html

Type
Trojan

Troj/Codebase-P exploits downloads and installs software from the internet.

http://www.sophos.com/virusinfo/analyses/trojcodebasep.html

Type
Spyware Worm

Aliases
Trojan-Spy.Win32.Banker.ant

W32/Antiman-H is an email worm for the Windows platform.

http://www.sophos.com/virusinfo/analyses/w32antimanh.html

Type
Trojan

Troj/Spywad-M is a Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojspywadm.html

Type
Trojan

Troj/Jupdrop-B is a dropper Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojjupdropb.html

Type
Trojan

Aliases
Trojan-Downloader.Win32.Small.cdk

Troj/DownLdr-NP is a Trojan for the Windows platform.

Troj/DownLdr-NP includes functionality to access the internet and communicate with a remote server via HTTP and bypass personal firewall software.

http://www.sophos.com/virusinfo/analyses/trojdownldrnp.html

Type
Trojan

Aliases
Trojan-Dropper.Win32.Agent.tb
TROJ_DLOADER.ALW

Troj/Agent-JK is a Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojagentjk.html

Type
Trojan

Aliases
Trojan-Downloader.Win32.Banload.gm
PWS-Banker.dldr

Troj/Banload-Z is a Trojan for the Windows platform.

Troj/Banload-Z includes functionality to access the internet and communicate with a remote server via HTTP.

http://www.sophos.com/virusinfo/analyses/trojbanloadz.html

Type
Spyware Trojan

Aliases
Trojan-Spy.Win32.Banker.ahy
W32/Bancos.ESM

Troj/Bancos-GD is a Trojan for the Windows platform.

Troj/Bancos-GD includes functionality to send notification messages to remote locations.

http://www.sophos.com/virusinfo/analyses/trojbancosgd.html

Type
Trojan

Aliases
Trojan-Downloader.Win32.Tibs.ai
BackDoor-AZV

Troj/Vixup-U is a Trojan for the Windows platform.

Troj/Vixup-U includes functionality to download, install and run new software.

http://www.sophos.com/virusinfo/analyses/trojvixupu.html

Type
Trojan

Aliases
Backdoor.Win32.Hupigon.ri

Troj/GrayBrd-U is a backdoor Trojan for the Windows platform.

Troj/GrayBrd-U includes functionality to access the internet and communicate with a remote server via HTTP. The Trojan may also act as a proxy, allowing a remote intruder to route internet traffic through the infected computer.

http://www.sophos.com/virusinfo/analyses/trojgraybrdu.html

Type
Trojan

Aliases
Trojan-Downloader.Win32.Zlob.bn

Troj/Zlob-AY is a Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojzlobay.html

Type
Spyware Trojan

Aliases
Backdoor.Win32.Hupigon.le

Troj/Feutel-BI is a backdoor Trojan for the Windows platform.

Troj/Feutel-BI includes functionality to log keypresses, and to access the internet and communicate with a remote server via HTTP.

http://www.sophos.com/virusinfo/analyses/trojfeutelbi.html

Type
Worm

W32/Mytob-GK is an mass-mailing worm with backdoor functionality for the Windows platform.

W32/Mytob-GK runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.

W32/Mytob-GK spreads by sending itself as an attachment to the email addresses harvested from files on the infected computer and from the Windows address book.

http://www.sophos.com/virusinfo/analyses/w32mytobgk.html

Type
Spyware Trojan

Aliases
Trojan-Spy.Win32.Banbra.do

Troj/Bancban-ND is an internet banking Trojan for the Windows platform.

Troj/Bancban-ND monitors internet sessions and displays fake login pages when certain banking web sites are visited, in order to steal account details.

http://www.sophos.com/virusinfo/analyses/trojbancbannd.html

Type
Trojan

Aliases
PWS-Banker.gen.ba

Troj/BankDL-AF is a downloading Trojan for the Windows platform.

Troj/BankDL-AF attempts to download and execute a file. This file is currently detected as Troj/Bancb-Fam.

http://www.sophos.com/virusinfo/analyses/trojbankdlaf.html

Type
Trojan

Troj/Shpiel-A is a backdoor Trojan for the Windows platform.

When first run Troj/Shpiel-A copies itself to the Windows folder with a name chosen randomly from the following list :

'msnupdate.exe'
'winfog.exe'
'winsys.exe'
'lsass1.exe'
'lovcx.exe'
'winsress.exe'
'winlog.exe'
'winsock.exe'
'saveruser.exe'
'winbackup.exe'

http://www.sophos.com/virusinfo/analyses/trojshpiela.html

Type
Spyware Trojan

Aliases
Trojan-Spy.Win32.Banker.alw

Troj/Bander-AC is an Internet banking Trojan for Windows platform.

Troj/Bander-AC has the functionalities to:

- display fake screens and messages
- steal information
- communicate with a remote server via email
- terminate AV related applications

http://www.sophos.com/virusinfo/analyses/trojbanderac.html

Type
Spyware Trojan

Aliases
Trojan-Spy.Win32.Banker.ang

Troj/Bander-U is an Internet banking Trojan for Windows platform.

Troj/Bander-U has the functionalities to:

- display fake screens and messages
- steal information
- communicate with a remote server via email
- terminate AV related applications

http://www.sophos.com/virusinfo/analyses/trojbanderu.html

Type
Spyware Trojan

Aliases
Trojan-Spy.Win32.Banker.alw

Troj/Bander-V is an Internet banking Trojan for Windows platform.

Troj/Bander-V has the functionalities to:

- display fake screens and messages
- steal information
- communicate with a remote server via email
- terminate AV related applications

http://www.sophos.com/virusinfo/analyses/trojbanderv.html

Type
Spyware Trojan

Aliases
Trojan-Spy.Win32.Banker.zp

Troj/Bandler-H is a Trojan for the Windows platform.

Troj/Bandler-H includes functionality to download, install and run new software.

http://www.sophos.com/virusinfo/analyses/trojbandlerh.html

Type Worm

Aliases W32/Sdbot.worm.gen.l

W32/Sdbot-AKZ is a worm with backdoor functionality for the Windows platform.
W32/Sdbot-AKZ runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.

http://www.sophos.com/virusinfo/analyses/w32sdbotakz.html

Type Trojan

Troj/Zlob-BG is a downloader Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojzlobbg.html