VIRUS ALERTS - July 18, 2006

Type Spyware Trojan

Aliases Trojan-Spy.Win32.Banker.boa
TSPY_BANCOS.MF

Troj/Banker-CZO is a Trojan for the Windows platform.

http://www.sophos.com/security/analyses/trojbankerczo.html

Type Trojan

Aliases Trojan.Win32.LowZones.du

roj/LowZone-DC is a Trojan for the Windows platform.

http://www.sophos.com/security/analyses/trojlowzonedc.html

Type Trojan

Aliases TROJ_SMALL.BEB

Troj/Downld-AAH is a downloader Trojan for the Windows platform.

http://www.sophos.com/security/analyses/trojdownldaah.html

Type Trojan

Aliases Trojan-Downloader.Win32.Delf.qz

Troj/Banloa-AKK is a Trojan for the Windows platform.

http://www.sophos.com/security/analyses/trojbanloaakk.html

Type Trojan

Aliases Trojan-Downloader.Win32.Small.crx
AdWare.Win32.Virtumonde.gen

Troj/Dloadr-AJC is a downloading Trojan for the Windows platform.

Troj/Dloadr-AJC downloads a file from a remote location to the temporary folder and then executes it.

http://www.sophos.com/security/analyses/trojdloadrajc.html

Type Trojan

Aliases Backdoor.Rustock.B
Trojan-Clicker.Win32.Small.lf
W32/Bancos.HWA
TROJ_SMALL.BYX

Troj/RusDrp-A is a Trojan for the Windows platform.

http://www.sophos.com/security/analyses/trojrusdrpa.html

Type Trojan

Aliases Trojan-Clicker.Win32.Small.ja
AdClicker-DF
TROJ_AGENT.CND

Troj/Clckr-IC is a Trojan for the Windows platform.

http://www.sophos.com/security/analyses/trojclckric.html

Type Trojan

Aliases Trojan-PSW.Win32.Agent.gq
Generic
TSPY_AGENT.CFQ

Troj/Agent-CTZ is a Trojan for the Windows platform.

http://www.sophos.com/security/analyses/trojagentctz.html

Type Trojan

Aliases Backdoor.Rustock.A
RTKT_RUSTOCK.C

Troj/RKRustok-B is a Trojan for the Windows platform.

The Trojan uses stealth techniques in order to hide files, processes and registry entries.

http://www.sophos.com/security/analyses/trojrkrustokb.html

Type Trojan

Aliases Backdoor.Rustock.B

Troj/RKRustok-A is a Trojan for the Windows platform.

The Trojan uses stealth techniques in order to hide files, processes and registry entries.

http://www.sophos.com/security/analyses/trojrkrustoka.html

Type Trojan

Aliases Trojan-Proxy.Win32.Xorpix.ab

Troj/Xorpix-H is a Trojan for the Windows platform.

Troj/Xorpix-H is dropped by Troj/Dropper-KT

http://www.sophos.com/security/analyses/trojxorpixh.html

Type Trojan

Aliases Trojan-Downloader.Win32.Agent.aqa
a variant of Win32/TrojanDownloader.Small.CIE
Bloodhound.W32.EP

Troj/SmDldr-E is a downloader Trojan for the Windows platform.

http://www.sophos.com/security/analyses/trojsmdldre.html

Type Trojan

Aliases Backdoor.Win32.Agent.acl
W32/Backdoor.LAC

Troj/Dropper-KT is a Trojan for the Windows platform.

The Trojan drops and runs another Trojan, detected as Troj/Xorpix-H, to the Temp folder of the current user.

http://www.sophos.com/security/analyses/trojdropperkt.html

Type Spyware Trojan

Aliases Email-Worm.Win32.Sowsat.f
Win32/Sowsat.G
W32.Sowsat.B@mm
WORM_SOWSAT.C

Troj/Sowsat-F is a Trojan keylogging component.

http://www.sophos.com/security/analyses/trojsowsatf.html

Type Trojan

Aliases rojan-Downloader.Win32.Small.cxh

Troj/Harnig-AK is a Trojan downloader for the Windows platform.

Troj/Harnig-AK attempts to download a number of files from a remote website.

Troj/Harnig-AK also attempts to stop a number of processes and delete a number of services related to security and anti-virus applications.

http://www.sophos.com/security/analyses/trojharnigak.html

Type Trojan

Aliases TROJ_VB.AWC

Troj/Prelo-A is a Trojan downloader for the Windows platform.

Troj/Prelo-A attempts to download files from a remote site to the Windows system folder.

Troj/Prelo-A attempts to terminate certain processes and services related to security and anti-virus applications.

http://www.sophos.com/security/analyses/trojpreloa.html

Type Trojan

Aliases Win32/TrojanDownloader.Small.CIE
Bloodhound.W32.EP

Troj/Smdldr-F is a downloading Trojan for the Windows platform.

http://www.sophos.com/security/analyses/trojsmdldrf.html

Type Trojan

Aliases Backdoor.Win32.Tiny.c
BackDoor-IQ.b
Win32/Tiny.C

Troj/Cmdoor-A is a backdoor Trojan for the Windows platform.

http://www.sophos.com/security/analyses/trojcmdoora.html

Type Worm

Aliases Backdoor.Win32.SdBot.aad
W32.Spybot.Worm

W32/Tilebot-GC is a worm and IRC backdoor for the Windows platform.

W32/Tilebot-GC spreads to other network computers by exploiting common buffer overflow vulnerabilities, including: LSASS (MS04-011), RPC-DCOM (MS04-012), WKS (MS03-049) (CAN-2003-0812), PNP (MS05-039) and ASN.1 (MS04-007) and by copying itself to network shares protected by weak passwords.

W32/Tilebot-GC runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.

http://www.sophos.com/security/analyses/w32tilebotgc.html

Type Trojan

Troj/Bdoor-AAF is a multi-component backdoor Trojan for the Windows platform.

Troj/Bdoor-AAF installs files including the Trojans Troj/Pastry-A, Troj/ServU-Gen and Troj/Bckdr-LBG.

http://www.sophos.com/virusinfo/analyses/trojbdooraaf.html

Type Trojan

Aliases Trojan.Win32.Agent.wd

Troj/Agent-CIH is a Trojan for the Windows platform.

Troj/Agent-CIH includes functionality to access the internet and communicate with a remote server via HTTP.

http://www.sophos.com/virusinfo/analyses/trojagentcih.html

Type Trojan

Aliases Trojan-Downloader.Win32.Agent.ajn
Downloader-ZL
Win32/TrojanDownloader.Small.CIE

Troj/SmDldr-G is a downloader Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojsmdldrg.html

Type Trojan

Aliases Trojan-Downloader.Win32.Agent.acr
Downloader-QN

Troj/Dloadr-AJD is a Trojan for the Windows platform.

Troj/Dloadr-AJD includes functionality to access the internet and communicate with a remote server via HTTP.

http://www.sophos.com/virusinfo/analyses/trojdloadrajd.html

Type Trojan

Troj/Dloadr-AJE is a Trojan for the Windows platform.

Troj/Dloadr-AJE includes functionality to download, install and run new
software.

http://www.sophos.com/virusinfo/analyses/trojdloadraje.html

Type Virus

Aliases Worm.Win32.Viking.k
W32/HLLP.Philis.aa
Win32/Viking.NAH
W32.Looked.J
PE_LOOKED.Z

W32/Looked-J is a virus for the Windows platform.

http://www.sophos.com/virusinfo/analyses/w32lookedj.html

Type Trojan

Troj/Bckdr-KZK is a Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojbckdrkzk.html