Spyware, Viruses, & Security forum

General discussion

VIRUS \ Spyware ALERTS - July 11, 2008

Discussion is locked
You are posting a reply to: VIRUS \ Spyware ALERTS - July 11, 2008
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: VIRUS \ Spyware ALERTS - July 11, 2008
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Troj/FakeVir-DF

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Category Viruses and Spyware

Type Trojan


Troj/FakeVir-DF claims to be an anti-virus scanner called "Spy Shredder".

When first run Troj/FakeVir-DF displays a warning message:

"STOP! Security status
Security errors detected. Remove these errors as soon as
possible to prevent data loss and private information
exposure. Click here to install protection tools now."

Troj/FakeVir-DF then opens a web page which shows the computer infected with various malware and spyware. Troj/FakeVir-DF prompts the user to purchase a license of "Spy Shredder" to remove the infections from the computer.

http://www.sophos.com/security/analyses/viruses-and-spyware/trojfakevirdf.html?_log_from=rss

Collapse -
Troj/FakeAv-AG

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/DwnLdr-HFG

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/Dloadr-BNW

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/Bckdr-QOH

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/Dwnldr-HFA

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/Agent-HFR

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/Agent-HFQ

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Mal/EncPk-EH

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/FakeVir-DI

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/FakeVir-DH

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/Banker-EMH

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/Adload-LP

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
W32/Kolabc-C

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
W32/AutoRun-GD

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Panda Security's weekly report on viruses and intruders

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Virus Alerts, by Panda Security (http://www.pandasecurity.com)


PandaLabs' latest weekly report provides information about the
WistaAntivirus adware, and the Buzus.AL and Fractalove.A worms.

WistaAntivirus passes itself off as an antivirus to fool users. When
run, the malicious code displays a screen informing users their PC is
infected, which is untrue (image here:
http://www.flickr.com/photos/9696103@N03/2657324821/). To disinfect the
system, users are invited to download anti-spyware software. If they
don't, the system connects to a Web page and simulates an online
computer scan, once again informing users about non-existent infections.


The adware's objective is purely financial: it makes users believe they
are infected so they 'purchase' the antivirus proposed by the malicious
code.

Buzus.AL is a worm with bot functions, designed to steal all sorts of
credentials and send them to its creator via FTP. To infect more
computers, it tries to spread through different channels (shared
folders, removable drives, etc.).

Fractalove.A is a worm that spreads through email. To fool users, it
passes itself off as a screensaver by the name of to_my_love.scr. If
users download and run the file, they will be infected. To divert users'
attention, it displays a screensaver with red fractals while it is
installed on the computer. e.g.
http://www.flickr.com/photos/9696103@N03/2657324879/

This worm has keylogger functions; once on the computer, it steals
confidential information and sends it to its creator. The data stolen
includes IM passwords, mailbox passwords and passwords of programs like
webmoney, etc. Fractalove.A uses the information obtained on IM programs
and via mail, to be sent through those channels and infect new users.

Further information about these threats is available on the PandaLabs
blog: www.pandalabs.com

Collapse -
Troj/Dloadr-BNX

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/Agent-HFS

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/Agent-HFP

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
PodcastbarMini Installer

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
PodcastbarMini

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/Sinowal-B

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/FakeVir-DJ

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/Dloadr-BNY

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/Buzus-F

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Aliases TROJ_BUZUS.HQ
Trojan.Win32.Buzus.jjn

Category Viruses and Spyware

Type Trojan

Troj/Buzus-F is a Trojan for the Windows platform.

Troj/Buzus-F includes functionality to inject code into other processes and to communicate with a remote server via HTTP.

Troj/Buzus-F usually can be located as the file <Windows>\iexplorer.exe.

The following registry entry is set:

HKCU\Software\Microsoft\Windows\currentVersion\Run
"iexplorer"
"<Windows>\iexplorer.exe --system"

http://www.sophos.com/security/analyses/viruses-and-spyware/trojbuzusf.html?_log_from=rss

Collapse -
Mal/Emogen-N

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
June Malware Roundup

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

July 11, 2008

May?s series of Web site compromises were replaced with spam and spoofed sites last June. Users were also served with a bigger serving of spam with a malware aftertaste, as many of the malware that emerged this month used were distributed through spam links.

Notable Malware

TROJ_PIDIEF.AC
This malware, which could be downloaded from a malicious URL, was revealed to have the capability to exploit an unknown vulnerability in Adobe Acrobat. When exploited successfully, Acrobat would download another malware from the same malicious URL and execute it. What makes TROJ_PIDIEF.AC notable is that it deceives the user into thinking that it has caused a BSOD (Blue Screen of Death), which is actually a fake one.

WORM_NUWAR.YH

More: http://blog.trendmicro.com/

Collapse -
Troj/PDFex-J. - ?2012: The Year The Internet Ends?

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

11 July 2008 11:34 GMT

Death of The Internet?
Yesterday we saw some interesting emails in our spam queues, which for once weren?t related to gigantic members or 5 million dollar bank transfers. The attention grabbing subject line of these mails was;

?2012: The Year The Internet Ends?

The body of the email gives a quick teaser, and invites the reader to open the attached PDF for more information.

More: http://www.sophos.com/security/blog/2008/07/1576.html

Collapse -
W32/Tiotua-R

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Collapse -
Troj/Zlob-AMK

In reply to: VIRUS \ Spyware ALERTS - July 11, 2008

Popular Forums

icon
Computer Newbies 10,686 discussions
icon
Computer Help 54,365 discussions
icon
Laptops 21,181 discussions
icon
Networking & Wireless 16,313 discussions
icon
Phones 17,137 discussions
icon
Security 31,287 discussions
icon
TVs & Home Theaters 22,101 discussions
icon
Windows 7 8,164 discussions
icon
Windows 10 2,657 discussions

SMART HOME

This one tip will help you sleep better tonight

A few seconds are all you need to get a better night's rest.