VIRUS \ Spyware ALERTS - November 4, 2008

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrbyi.html?_log_from=rss

Category Viruses and Spyware

Type Trojan

Troj/Dloadr-BYH is a Trojan for the Windows platform.

Troj/Dloadr-BYH is an obsfucated JavaScript that downloads and runs additional malware.

http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrbyh.html?_log_from=rss

Aliases TrojanDownloader:Win32/Renos.FH

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrbyg.html?_log_from=rss

Aliases W32/Downldr2.ZYD
Backdoor.Trojan

Category Viruses and Spyware

Type Trojan

Troj/Dloadr-BYC is a downloader Trojan for the Windows platform.

http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrbyc.html?_log_from=rss

Category Viruses and Spyware

Type Malicious Behavior

Mal/Zlob-AD detects the Zlob family of Trojans.

http://www.sophos.com/security/analyses/viruses-and-spyware/malzlobad.html?_log_from=rss

Category Viruses and Spyware

Type Malicious Behavior

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/malwintrima.html?_log_from=rss

Aliases SPR/PSW.KeyLoger
application Keylog-Quick

Category Adware or PUA

Type Unspecified PUA

LaunchInIE is a potentially unwanted application, seen used by the Handy Keylogger potentially unwanted application.

LaunchInIE may set registry entries under the following location:

HKLM\SOFTWARE\RockinFewl\LaunchinIE

http://www.sophos.com/security/analyses/adware-and-puas/launchinie.html?_log_from=rss

Category Suspicious behavior and files

Type Suspicious behavior

What's been detected Sus/Dropper-A exhibits characteristics commonly, but not exclusively, found in malware.

Sus/Dropper-A is a file that tries to install another program file using a
technique which is not common amongst standard installers.

http://www.sophos.com/security/analyses/suspicious-behavior-and-files/susdroppera.html?_log_from=rss