VIRUS ALERTS - January 3, 2006

Type Trojan

Aliases Trojan-Downloader.Win32.Small.gen


Troj/Small-IC is a Trojan for the Windows platform.
Troj/Small-IC includes functionality to download, install and run new software.

http://www.sophos.com/virusinfo/analyses/trojsmallic.html

Type Trojan

Aliases Trojan-Downloader.Win32.Banload.je

Troj/Banload-JE is a Trojan for the Windows platform.
Troj/Banload-JE includes functionality to access the internet and communicate with a remote server via HTTP.

http://www.sophos.com/virusinfo/analyses/trojbanloadje.html

Type Trojan

Aliases TROJ_SMALL.AWE
Trojan-Downloader.Win32.Small.asa

Troj/Clicker-AZ is a Trojan for the Windows platform.
Troj/Clicker-AZ opens an Internet Explorer window on a preconfigured URL.

http://www.sophos.com/virusinfo/analyses/trojclickeraz.html

Type Trojan

Aliases Trojan-Downloader.Win32.Banload.fc
PWS-Banker.gen.ba

Troj/Banload-HG is a Trojan for the Windows platform.
Troj/Banload-HG includes functionality to download, install and run new software.

http://www.sophos.com/virusinfo/analyses/trojbanloadhg.html

Type Trojan

Aliases Trojan-Downloader.Win32.Small.cds

Troj/Vixup-W is a downloading Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojvixupw.html

Type Trojan

Aliases Trojan-Downloader.Win32.Banload.oa

Troj/Banload-HF is a Trojan for the Windows platform.
Troj/Banload-HF includes functionality to download further malicious code.

http://www.sophos.com/virusinfo/analyses/trojbanloadhf.html

Type Trojan

Aliases Trojan-Downloader.Win32.Delf.abi
Downloader-ACH
Download.Trojan

Troj/Downldr-GX is a Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojdownldrgx.html

Type Spyware Trojan

Aliases Trojan-Spy.Win32.Banker.anv
PWS-Banker.gen.ba

Troj/Banker-SW is a Trojan for the Windows platform which attempts to capture confidential information related to Internet Banking, such as usernames and logon passwords.
Troj/Banker-SW includes functionality to send notification messages to remote locations


http://www.sophos.com/virusinfo/analyses/trojbankersw.html

Type Spyware Worm

Aliases Backdoor.Win32.Rbot.alw

W32/Rbot-BHZ is a worm and IRC backdoor Trojan for the Windows platform.
W32/Rbot-BHZ spreads to other network computers by exploiting common buffer
overflow vulnerabilities, including: RPC-DCOM (MS04-012), PNP (MS05-039) and
ASN.1 (MS04-007).

http://www.sophos.com/virusinfo/analyses/w32rbotbhz.html

Type Trojan

Troj/DNSBust-F attempts to modify DNS settings on the computer.
The Trojan modifies the file
%APPDATA%\Microsoft\Network\Connections\Pbk\rasphone.pbk by creating or
changing the entries for IpDnsAddress and IpDns2Address to point to
prespecified IP addresses. Troj/DNSBust-F then uses ipconfig.exe to flush the
DNS cache.

http://www.sophos.com/virusinfo/analyses/trojdnsbustf.html

Type Trojan

Aliases TROJ_DLOADER.BFO
Trojan-Downloader.Win32.Agent.abm

Troj/Dloadr-BFO is a Trojan for the Windows platform.
The Trojan downloads and installs files from a remote site.

http://www.sophos.com/virusinfo/analyses/trojdloadrbfo.html

Type Trojan

Aliases Trojan-PSW.Win32.Agent.cf

Troj/Dloadr-BFP is a Trojan for the Windows platform.
The Trojan downloads files from a remote site. The downloaded files may contain
additional instructions defining further behaviors.

http://www.sophos.com/virusinfo/analyses/trojdloadrbfp.html

Type Trojan

Aliases StartPage-IH
Trojan.Win32.VB.sj

Troj/StartPa-KB is a Trojan for the Windows platform.
When first run Troj/StartPa-KB copies itself to <System>\Run9939.exe.
The Trojan modifies the start and search page settings for Internet Explorer.
Troj/StartPa-KB may also download and install additional files.

http://www.sophos.com/virusinfo/analyses/trojstartpakb.html

Type Trojan

Aliases Backdoor.Win32.VB.apc
W32/Proxy.JZ

Troj/VB-APC is a Trojan for the Windows platform.
Troj/VB-APC downloads and installs several files from a remote site.

http://www.sophos.com/virusinfo/analyses/trojvbapc.html

Type Spyware Trojan

Aliases TSPY_BANCOS.BRV
Trojan-Spy.Win32.Bancos.nw

Troj/Bancos-BRV is a Trojan for the Windows platform.
The Trojan is registered as a Browser Helper Object and steals login
credentials entered into web page forms.

http://www.sophos.com/virusinfo/analyses/trojbancosbrv.html

Type Spyware Trojan

Aliases Trojan-PSW.Win32.Lmir.aqa

Troj/LegMir-DN is a password-stealing Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojlegmirdn.html

Type Trojan

Aliases Trojan.Win32.Small.ev
Trojan.Desktophijack.B
TROJ_SMALL.AZN

Troj/Small-GP is a Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojsmallgp.html