VIRUS ALERTS - October 21, 2006

Type Trojan

Aliases Trojan-Downloader.Win32.Zlob.aqk
Win32/TrojanDownloader.Zlob.AFP

Troj/Zlob-UL may be downloaded and installed by Troj/Zlob-UK.

Troj/Zlob-UL is a Trojan downloader for the Windows platform.

Troj/Zlob-UL attempts to download and execute files from a predefined URL.

http://www.sophos.com/virusinfo/analyses/trojzlobul.html

Type Spyware Trojan

Troj/HacDef-DO is a backdoor Trojan for the Windows platform.

Troj/HacDef-DJ includes functionality to:

- silently download, install and run new software
- act as a email spam server

http://www.sophos.com/virusinfo/analyses/trojhacdefdo.html

Type Trojan

Troj/Bdoor-ABI is a Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojbdoorabi.html

Type Trojan

Aliases Trojan-Downloader.Win32.Zlob.aqg
Win32/TrojanDownloader.Zlob.AFN

Troj/Zlob-UK is a downloading Trojan for the Windows platform.

http://www.sophos.com/virusinfo/analyses/trojzlobuk.html

Type Trojan

Aliases Win32/Agent.NEC

Troj/Bckdr-XYZ is a backdoor Trojan for the Windows platform.

Troj/Bckdr-XYZ includes functionality to access the internet and communicate with a remote server via HTTP.

Troj/Bckdr-XYZ runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer.

http://www.sophos.com/virusinfo/analyses/trojbckdrxyz.html

Type Trojan

Troj/Zlobns-V is a Trojan for the Windows platform.

Troj/Zlobns-V installs a DLL component that may download other Trojans in the Zlob family. Troj/Zlobns-V is likely to masquerade as a video codec installation file.

http://www.sophos.com/virusinfo/analyses/trojzlobnsv.html

Type Worm

Aliases Backdoor.Win32.Rbot.bmj

W32/Rbot-FSJ is a worm and IRC backdoor Trojan for the Windows platform.

W32/Rbot-FSJ runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.

http://www.sophos.com/virusinfo/analyses/w32rbotfsj.html

Type Trojan

Aliases Backdoor.Win32.MSNMaker.w

Troj/MSNMake-W is a Trojan for the Windows platform.

Troj/MSNMake-W includes functionality to access the internet and communicate with a remote server via HTTP.

http://www.sophos.com/virusinfo/analyses/trojmsnmkw.html

Type Worm

Aliases Backdoor.Win32.EggDrop.v

W32/Rbot-E is a worm and IRC backdoor Trojan for the Windows platform.

W32/Rbot-E spreads to other network computers by exploiting common buffer overflow vulnerabilities, including: RPC-DCOM (MS04-012) and ASN.1 (MS04-007).

W32/Rbot-E runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.

http://www.sophos.com/security/analyses/w32rbotfsk.html

Type Trojan

Aliases Trojan.Win32.Delf.cn

Dial/ExDial-C is is a premium rate dialer for the Windows platform

http://www.sophos.com/virusinfo/analyses/dialexdialc.html

Type Trojan

Aliases Trojan.Win32.Delf.cn

Dial/ExDial-D is a premium rate dialer for the Windows platform.

http://www.sophos.com/virusinfo/analyses/dialexdiald.html

Type Worm

Aliases Email-Worm.Win32.Warezov.dc

W32/Stration-BB is a worm for the Windows platform.

W32/Stration-BB includes functionality to download, install and run new software.

http://www.sophos.com/virusinfo/analyses/w32strationbb.html

Type Trojan

Aliases Dialer-Generic.e
TROJ_DIAMIN.GC

Troj/Dialer-CZ is a Trojan for the Windows platform.

Troj/Dialer-CZ is a premium rate dialler application.

http://www.sophos.com/virusinfo/analyses/trojdialercz.html

Type Trojan

Aliases Downloader-AXO
TROJ_DLOADER.FAC

Troj/Small-DHK is a Trojan for the Windows platform.

Troj/Small-DHK includes functionality to access the internet and communicate with a remote server via HTTP.

http://www.sophos.com/virusinfo/analyses/trojsmalldhk.html

Type Trojan

Aliases Trojan.Win32.Dialer.qn

Dial/TDial-B is a premium rate dialer for the Windows platform.

Dial/TDial-B may attempt to make http connections.

http://www.sophos.com/virusinfo/analyses/dialtdialb.html