VIRUS \ Spyware ALERTS - October 20, 2008

W32/Jeans-B

Category Viruses and Spyware

Type Worm

W32/Jeans-B copies itself to removable drives as imagenes.exe.

W32/Jeans-B copies itself to:
<System32>\mexica.exe
<Temp>\mexica.exe
<Windows>\system234.exe
<Root>\imagenes.exe

W32/Jeans-B creates the registry entries
HKLM\Software\Microsoft\Windows\CurrentVersion
Run
<Temp>\mexica.exe

HKLM\Software\Microsoft\Windows NT\Currentversion\WOW\boot
rhell
explorer.exe <System>\mexica.exe

http://www.sophos.com/security/analyses/viruses-and-spyware/w32jeansb.html?_log_from=rss

Discussion is locked

- Collapse -

Troj/Dloadr-BWK

by Marianna Schmudlach Oct 20, 2008 7:58AM PDT

Aliases Trojan-Downloader.Win32.Agent.ajtr

Category Viruses and Spyware

Type Trojan

Troj/Dloadr-BWK is a downloading Trojan for the Windows platform.

Troj/Dloadr-BWK copies itself to the Windows system folder with a random name and creates scheduled tasks in order to run itself every hour.

http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrbwk.html?_log_from=rss

- Collapse -

Troj/BHO-HJ

by Marianna Schmudlach Oct 20, 2008 7:59AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojbhohj.html?_log_from=rss

- Collapse -

Troj/Agent-HZA

by Marianna Schmudlach Oct 20, 2008 8:03AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojagenthza.html?_log_from=rss

- Collapse -

Troj/Agent-HYZ

by Marianna Schmudlach Oct 20, 2008 8:04AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojagenthyz.html?_log_from=rss

- Collapse -

Troj/Agent-HYW

by Marianna Schmudlach Oct 20, 2008 8:06AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojagenthyw.html?_log_from=rss

- Collapse -

Troj/Agent-HYF

by Marianna Schmudlach Oct 20, 2008 8:07AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojagenthyf.html?_log_from=rss

- Collapse -

Mal/StartPa-D

by Marianna Schmudlach Oct 20, 2008 8:10AM PDT

Category Viruses and Spyware

Type Malicious Behavior

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/malstartpad.html?_log_from=rss

- Collapse -

Sus/Sality-A

by Marianna Schmudlach Oct 20, 2008 8:12AM PDT

Category Suspicious behavior and files

Type Suspicious behavior

Sus/Sality-A is a file that displays characteristics or behavior typically associated with malware.

Sus/Sality-A is a file that may have been infected by W32/Sality-AM.

Please send a sample to Sophos support to assist in improving our technology.

http://www.sophos.com/security/analyses/suspicious-behavior-and-files/sussalitya.html?_log_from=rss

VIRUS \ Spyware ALERTS - October 20, 2008

CNET Forums

Other Forums

Forum Info