Spyware, Viruses, & Security forum

General discussion

VIRUS ALERTS - September 1, 2004

Discussion is locked
You are posting a reply to: VIRUS ALERTS - September 1, 2004
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: VIRUS ALERTS - September 1, 2004
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Troj/Userv-A

In reply to: VIRUS ALERTS - September 1, 2004

Collapse -
Troj/Banker-L

In reply to: VIRUS ALERTS - September 1, 2004

Type Trojan

Troj/Banker-L is resident Trojan for the windows platform that
attempts to defraud users of a brazilian bank by displaying fake web
pages similar to those of the bank's online banking system.
Troj/Banker-L will then attempt to record information entered by the user
and try to email it to a number of brazillian addresses.
Troj/Banker-L will copy itself to the file sdiapp.exe in a new sub-folder
called systens in the Windows folder.


http://www.sophos.com/virusinfo/analyses/trojbankerl.html

Collapse -
Troj/Bdoor-B

In reply to: VIRUS ALERTS - September 1, 2004

Collapse -
Troj/Proxyser-D

In reply to: VIRUS ALERTS - September 1, 2004

Collapse -
Troj/Iefeat-O

In reply to: VIRUS ALERTS - September 1, 2004

Collapse -
Troj/Banker-M

In reply to: VIRUS ALERTS - September 1, 2004

Collapse -
W32/Gobot-E

In reply to: VIRUS ALERTS - September 1, 2004

Collapse -
W32/Agobot-MM

In reply to: VIRUS ALERTS - September 1, 2004

Aliases Backdoor.Win32.Agobot.vd
W32/Sdbot.worm.gen.h

Type Worm

W32/Agobot-MM is an IRC backdoor Trojan and network worm which can copy itself into shared network folders with weak passwords and send emails to contacts found in the Windows Address Book with itself included as an executable attachment.
W32/Agobot-MM can move itself into the Windows system folder and set registry entries to ensure that it is executed automatically upon system restart.
W32/Agobot-MM can terminate security-related processes on the local and remote computers and steal data from network traffic. This worm can also collect CD keys from several popular applications and computer games for retrieval by a remote intruder.
W32/Agobot-MM can exploit the following vulnerabilities to aid propagation on unpatched systems and manipulate registry keys:
Remote Procedure Call (RPC) vulnerability.
Distributed Component Object Model (DCOM) vulnerability.
RPC Locator vulnerability.
IIS5/WEBDAV Buffer Overflow vulnerability.
For more information about these Windows vulnerabilities, please refer to the following Microsoft Security Bulletins:
Microsoft Security Bulletin MS03-001
Microsoft Security Bulletin MS03-007
Microsoft Security Bulletin MS03-039

http://www.sophos.com/virusinfo/analyses/w32agobotmm.html

Collapse -
Troj/StartPa-HB

In reply to: VIRUS ALERTS - September 1, 2004

Collapse -
W32/Rbot-HR

In reply to: VIRUS ALERTS - September 1, 2004

Collapse -
Troj/Becon-B

In reply to: VIRUS ALERTS - September 1, 2004

Collapse -
Troj/Becon-A

In reply to: VIRUS ALERTS - September 1, 2004

Collapse -
Troj/Becon-C

In reply to: VIRUS ALERTS - September 1, 2004

Collapse -
Troj/Multidr-AD

In reply to: VIRUS ALERTS - September 1, 2004

Collapse -
Troj/Trimore-B

In reply to: VIRUS ALERTS - September 1, 2004

Collapse -
Troj/SpyVB-C

In reply to: VIRUS ALERTS - September 1, 2004

Aliases TrojanSpy.Win32.VB.bl

Type Trojan

Troj/SpyVB-C is a keylogging Trojan.
Troj/SpyVB-C copies itself to the Windows system folder and sets a registry key so that it will be run on system startup.
Troj/SpyVB-C records all actions performed on the infected computer including all keypresses, this information may be sent from the infected computer by email.

http://www.sophos.com/virusinfo/analyses/trojspyvbc.html

Collapse -
Troj/Banker-N

In reply to: VIRUS ALERTS - September 1, 2004

Collapse -
W32/Rbot-HS

In reply to: VIRUS ALERTS - September 1, 2004

Aliases Backdoor.Rbot.gen

Type Worm

W32/Rbot-HS is a network worm which exploits weak passwords and a number of network exploits.
W32/Rbot-HS contains IRC backdoor Trojan functionality, allowing unauthorised remote access to the infected computer.

http://www.sophos.com/virusinfo/analyses/w32rboths.html

Collapse -
W32/Bagle-AT

In reply to: VIRUS ALERTS - September 1, 2004

Aliases I-Worm.Bagle.an
W32/Bagle.at@MM

Type Worm

W32/Bagle-AT is a worm which spreads using email and shared folders.
The worm forges the sender address of the email.
W32/Bagle-AT avoids sending email to addresses which may be anti-virus or security related.
Email sent by the worm has the following characteristics:
Subject line : foto
Message text : foto
Attached file : fotos.zip
The attached file contains Troj/BagleDl-A.

http://www.sophos.com/virusinfo/analyses/w32bagleat.html

Collapse -
W32/Rbot-HT

In reply to: VIRUS ALERTS - September 1, 2004

Aliases Backdoor.Rbot.gen
W32/Sdbot.worm.gen.h

Type Worm

W32/Rbot-HT is an IRC backdoor Trojan and network worm which can copy itself into shared network folders.
W32/Rbot-HT will establish a connection to a remote server to allow an intruder access to the compromised computer.

http://www.sophos.com/virusinfo/analyses/w32rbotht.html

Popular Forums

icon
Computer Newbies 10,686 discussions
icon
Computer Help 54,365 discussions
icon
Laptops 21,181 discussions
icon
Networking & Wireless 16,313 discussions
icon
Phones 17,137 discussions
icon
Security 31,287 discussions
icon
TVs & Home Theaters 22,101 discussions
icon
Windows 7 8,164 discussions
icon
Windows 10 2,657 discussions

GRAMMYS 2019

Here's Everything to Know About the 2019 Grammys

Find out how to watch the Grammy Awards if you don't have cable and more.