Attention: The forums will be placed on read only mode this Saturday (Oct. 20, 2018)

During this outage (6:30 AM to 8 PM PDT) the forums will be placed on read only mode. We apologize for this inconvenience. Click here to read details

Spyware, Viruses, & Security forum

General discussion

VIRUS ALERTS - July 3, 2006

by roddy32 / July 3, 2006 2:08 AM PDT
Discussion is locked
You are posting a reply to: VIRUS ALERTS - July 3, 2006
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: VIRUS ALERTS - July 3, 2006
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Troj/Banker-DLZ
by roddy32 / July 3, 2006 2:10 AM PDT

Type Spyware Trojan

Aliases Trojan-Spy.Win32.Banker.bck
Win32/Spy.Banker.BCK

Troj/Banker-DLZ is an internet banking Trojan for the Windows platform.

When run Troj/Banker-DLZ continuously monitors Microsoft Internet Explorer for certain strings related to internet banking related websites.

Once a match is found, Troj/Banker-DLZ will display a fake login screen, prompting the user to enter confidential information.

http://www.sophos.com/security/analyses/trojbankerdlz.html

Collapse -
Troj/Agent-CCW
by roddy32 / July 3, 2006 2:14 AM PDT
Collapse -
Troj/Banker-CLW
by roddy32 / July 3, 2006 2:17 AM PDT

Type Spyware Trojan

Aliases Trojan-Spy.Win32.Banbra.hd


Troj/Banker-CLW is an internet banking Trojan for the Windows platform.

When run Troj/Banker-CLW continuously monitors Microsoft Internet Explorer for certain strings related to internet banking related websites.

Once a match is found, Troj/Banker-CLW will display a fake login screen, prompting the user to enter confidential information.

http://www.sophos.com/security/analyses/trojbankerclw.html

Collapse -
Troj/Dloadr-YQ
by roddy32 / July 3, 2006 2:19 AM PDT

Type Trojan

Aliases Trojan-Downloader.Win32.Small.cub

Troj/Dloadr-YQ is a downloader Trojan which will download, install and run new software without prior user notification.

When run the Trojan downloads to <Temp>\t9596.exe

The downloaded file was unavailable at the time of writing.

http://www.sophos.com/security/analyses/trojdloadryq.html

Collapse -
Troj/Lineage-VJ
by roddy32 / July 3, 2006 2:23 AM PDT
Collapse -
Troj/Bckdr-LFD
by roddy32 / July 3, 2006 2:26 AM PDT
Collapse -
Troj/Tibs-ET
by roddy32 / July 3, 2006 2:28 AM PDT
Collapse -
Troj/Tibs-EU
by roddy32 / July 3, 2006 2:33 AM PDT
Collapse -
Troj/SpyDldr-J
by Marianna Schmudlach / July 3, 2006 10:45 AM PDT

Type Trojan

Aliases Hoax.Win32.Renos.dk
TFactory
Win32/Hoax.Renos.DK

Troj/SpyDldr-J is a Trojan for the Windows platform.

Troj/SpyDldr-J creates registry entries and drops corrupt executable files on the infected computer that indicate the presence the of malware or adware on the computer and may generate fake alerts on the presence of them.

Troj/SpyDldr-J may display the following fake error message:

Warning!

Local Security Authority Service ('lsass.exe') has encountered a serious problem (possible spyware infection).

Click OK button to visit Windows Security Center web site and download spyware remover to protect your
system against trojans, viruses and spyware. System scan is highly recommended by Windows Security Center.

'lsass.exe' terminated unexpectedly with status code -1073741819


http://www.sophos.com/virusinfo/analyses/trojspydldrj.html

Collapse -
Troj/HacDef-J
by Marianna Schmudlach / July 3, 2006 10:46 AM PDT
Collapse -
W32/Detnat-P
by Marianna Schmudlach / July 3, 2006 10:47 AM PDT
Collapse -
Dial/PlayGame-B
by Marianna Schmudlach / July 3, 2006 10:48 AM PDT
Collapse -
Troj/Zlob-PL
by Marianna Schmudlach / July 3, 2006 10:49 AM PDT
Collapse -
Troj/Zlob-PX
by Marianna Schmudlach / July 3, 2006 10:50 AM PDT
Collapse -
Troj/Dloadr-YX
by Marianna Schmudlach / July 3, 2006 10:51 AM PDT
Collapse -
W32/Tilebot-FT
by Marianna Schmudlach / July 3, 2006 10:52 AM PDT

Type Spyware Worm

Aliases Backdoor.Win32.SdBot.aoy

W32/Tilebot-FT is a worm with IRC backdoor functionality for the Windows platform.

W32/Tilebot-FT spreads to other network computers by exploiting common buffer overflow vulnerabilities, including: LSASS (MS04-011), RPC-DCOM (MS04-012), PNP (MS05-039) and ASN.1 (MS04-007). The worm may also spreads via network shares protected by weak passwords.

W32/Tilebot-FT runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.

W32/Tilebot-FT includes functionality to:

set up an FTP server
set up a proxy server
spread via AOL Instant Messager by sending messages automatically
change Internet Explorer start page
set or remove network shares
port scanning
packet sniffing
access the internet and communicate with a remote server via HTTP
harvest information from clipboard
take part in Distributed Denial of Service (DDoS) attacks

W32/Tilebot-FT includes functionality to access the internet and communicate
with a remote server via HTTP.

http://www.sophos.com/virusinfo/analyses/w32tilebotft.html

Popular Forums

icon
Computer Newbies 10,686 discussions
icon
Computer Help 54,365 discussions
icon
Laptops 21,181 discussions
icon
Networking & Wireless 16,313 discussions
icon
Phones 17,137 discussions
icon
Security 31,287 discussions
icon
TVs & Home Theaters 22,101 discussions
icon
Windows 7 8,164 discussions
icon
Windows 10 2,657 discussions

FALL TV PREMIERES

Your favorite shows are back!

Don’t miss your dramas, sitcoms and reality shows. Find out when and where they’re airing!