VIRUS \ Spyware ALERTS - November 6, 2008

Alert ID : FrSIRT/ALRT-2008-06803
Aliases : N/A
Size : N/A
Rated as : Low Risk
Release Date : 2008-11-06


Description

Technical details and description are not available at this time.

References

http://www.sophos.com/security/analyses/viruses-and-spyware/trojbdoorapp.html

Credits

Reported by Sophos

Alert ID : FrSIRT/ALRT-2008-06804
Aliases : N/A
Size : N/A
Rated as : Low Risk
Release Date : 2008-11-06


Description

Technical details and description are not available at this time.

References

http://www.sophos.com/security/analyses/viruses-and-spyware/trojclickerfc.html

Credits

Reported by Sophos

Alert ID : FrSIRT/ALRT-2008-06805
Aliases : N/A
Size : N/A
Rated as : Low Risk
Release Date : 2008-11-06


Description

Technical details and description are not available at this time.

References

http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrbyr.html

Credits

Reported by Sophos

Alert ID : FrSIRT/ALRT-2008-06806
Aliases : N/A
Size : N/A
Rated as : Low Risk
Release Date : 2008-11-06


Description

Technical details and description are not available at this time.

References

http://www.sophos.com/security/analyses/viruses-and-spyware/trojpwsavv.html

Credits

Reported by Sophos

Alert ID : FrSIRT/ALRT-2008-06807
Aliases : Win32/TrojanDownloader.Zlob.CTM
Size : N/A
Rated as : Low Risk
Release Date : 2008-11-06


Description

Troj/Zlob-AQO is a Trojan for the Windows platform. Troj/Zlob-AQO includes functionality to access the internet and communicate with a remote server via HTTP.

References

http://www.sophos.com/security/analyses/viruses-and-spyware/trojzlobaqo.html

Credits

Reported by Sophos

Alert ID : FrSIRT/ALRT-2008-06808
Aliases : N/A
Size : N/A
Rated as : Low Risk
Release Date : 2008-11-06


Description

Technical details and description are not available at this time.

References

http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrbyp.html

Credits

Reported by Sophos

Alert ID : FrSIRT/ALRT-2008-06809
Aliases : N/A
Size : N/A
Rated as : Low Risk
Release Date : 2008-11-06


Description

Technical details and description are not available at this time.

References

http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrbyq.html

Credits

Reported by Sophos

Alert ID : FrSIRT/ALRT-2008-06810
Aliases : N/A
Size : N/A
Rated as : Low Risk
Release Date : 2008-11-06


Description

Technical details and description are not available at this time.

References

http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrbyo.html

Credits

Reported by Sophos

Alert ID : FrSIRT/ALRT-2008-06816
Aliases : N/A
Size : N/A
Rated as : Low Risk
Release Date : 2008-11-06


Description

Mal/ObfJS-BL is an obfuscated JavaScript within a web page that is likely to exploit vulnerabilities in the browser in order to infect the victim with malware.

References

http://www.sophos.com/security/analyses/viruses-and-spyware/malobfjsbl.html

Credits

Reported by Sophos

Alert ID : FrSIRT/ALRT-2008-06817
Aliases : N/A
Size : N/A
Rated as : Low Risk
Release Date : 2008-11-06


Description

Technical details and description are not available at this time.

References

http://www.sophos.com/security/analyses/viruses-and-spyware/trojagentidq.html

Credits

Reported by Sophos

Alert ID : FrSIRT/ALRT-2008-06834
Aliases : N/A
Size : 3261 bytes
Rated as : Low Risk
Release Date : 2008-11-06


Description

This Trojan may be downloaded unknowingly by a user when visiting malicious Web sites. A link to the said Web site from which it is downloaded from is given in a spam email. A screenshot of a sample spam email is given below:.

References

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_DLOADER.ISZ

Credits

Reported by Trend Micro

Alert ID : FrSIRT/ALRT-2008-06833
Aliases : N/A
Size : N/A
Rated as : Low Risk
Release Date : 2008-11-06


Description

Technical details and description are not available at this time.

References

http://www.sophos.com/security/analyses/viruses-and-spyware/trojzlobaqm.html

Credits

Reported by Sophos

Alert ID : FrSIRT/ALRT-2008-06832
Aliases : Win32/TrojanDownloader.Zlob.CUH - Pupertrojan
Size : N/A
Rated as : Low Risk
Release Date : 2008-11-06


Description

Troj/Zlob-AQL is a Trojan for the Windows platform. Troj/Zlob-AQL includes functionality to access the internet and communicate with a remote server via HTTP.

References

http://www.sophos.com/security/analyses/viruses-and-spyware/trojzlobaql.html

Credits

Reported by Sophos

Alert ID : FrSIRT/ALRT-2008-06831
Aliases : N/A
Size : N/A
Rated as : Low Risk
Release Date : 2008-11-06


Description

Technical details and description are not available at this time.

References

http://www.sophos.com/security/analyses/viruses-and-spyware/trojpwsavu.html

Credits

Reported by Sophos

Alert ID : FrSIRT/ALRT-2008-06830
Aliases : N/A
Size : N/A
Rated as : Low Risk
Release Date : 2008-11-06


Description

Troj/Kango-F is a Trojan for the Windows platform. When first run Troj/Kango-F copies itself to <System>\Setupw.exe and creates the file <System>\494596162.dat.

References

http://www.sophos.com/security/analyses/viruses-and-spyware/trojkangof.html

Credits

Reported by Sophos

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojzlobaqq.html?_log_from=rss

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojzlobaqp.html?_log_from=rss

Aliases Trojan.Win32.VB.gmp
Generic.dx

Category Viruses and Spyware

Type Trojan

Troj/VBDown-H is a Trojan for the Windows platform.

Troj/VBDown-H includes functionality to access the internet and communicate with a remote server via HTTP.

When first run Troj/VBDown-H copies itself to the Windows system folder

The following registry entries are created to run Troj/VBDown-H on startup:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
prunnet
<System&gt<original Trojan filename>

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
prunnet
<System&gt<original Trojan filename>

Registry entries are created under:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\prunnet

Troj/VBDown-H provides an uninstall option which can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as "Advertisement Service".

http://www.sophos.com/security/analyses/viruses-and-spyware/trojvbdownh.html?_log_from=rss

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojonlingfam.html?_log_from=rss

Category Viruses and Spyware

Type Trojan

Troj/Invo-Zip is a family of zip files that contain malware.

Members of Troj/Invo-Zip are usually sent in spam pretending to relate to an invoice or receipt, often one related to a UPS transaction or to tax.

http://www.sophos.com/security/analyses/viruses-and-spyware/trojinvozip.html?_log_from=rss

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojfakevirhb.html?_log_from=rss

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojfakevirha.html?_log_from=rss

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrbys.html?_log_from=rss