VIRUS \ Spyware ALERTS - October 29, 2008 - October 2008 - Forums

- Collapse -

Troj/Zbot-AQ

by Marianna Schmudlach Oct 28, 2008 12:03PM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojzbotaq.html?_log_from=rss

- Collapse -

Troj/Dloadr-BXG

by Marianna Schmudlach Oct 28, 2008 12:04PM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrbxg.html?_log_from=rss

- Collapse -

Troj/Dloadr-BXF

by Marianna Schmudlach Oct 28, 2008 12:05PM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrbxf.html?_log_from=rss

- Collapse -

Troj/Agent-IBW

by Marianna Schmudlach Oct 28, 2008 12:06PM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojagentibw.html?_log_from=rss

- Collapse -

Troj/Wimad-K

by Marianna Schmudlach Oct 28, 2008 2:35PM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojwimadk.html?_log_from=rss

- Collapse -

W32/Autorun-NA

by Marianna Schmudlach Oct 28, 2008 3:36PM PDT

Category Viruses and Spyware

Type Worm

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/w32autorunna.html?_log_from=rss

- Collapse -

Troj/Zbot-AR

by Marianna Schmudlach Oct 28, 2008 3:37PM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojzbotar.html?_log_from=rss

- Collapse -

Troj/PWS-AVE

by Marianna Schmudlach Oct 28, 2008 3:38PM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojpwsave.html?_log_from=rss

- Collapse -

Troj/Invo-Zip

by Marianna Schmudlach Oct 28, 2008 3:39PM PDT

Category Viruses and Spyware

Type Trojan

Troj/Invo-Zip is a family of zip files that contain malware.

Members of Troj/Invo-Zip are usually sent in spam pretending to relate to an invoice or receipt, often one related to a UPS transaction or to tax.

http://www.sophos.com/security/analyses/viruses-and-spyware/trojinvozip.html?_log_from=rss

- Collapse -

Troj/Fakevir-GU

by Marianna Schmudlach Oct 28, 2008 3:40PM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojfakevirgu.html?_log_from=rss

- Collapse -

Troj/Agent-IBX

by Marianna Schmudlach Oct 28, 2008 3:41PM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojagentibx.html?_log_from=rss

- Collapse -

Mal/RarMal-C

by Marianna Schmudlach Oct 28, 2008 3:42PM PDT

Category Viruses and Spyware

Type Malicious Behavior

Mal/RarMal-C is a family of malicious RAR archives, often seen in spam.

http://www.sophos.com/security/analyses/viruses-and-spyware/malrarmalc.html?_log_from=rss

- Collapse -

Troj/PWS-AVE

by Marianna Schmudlach Oct 29, 2008 1:52AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojpwsave.html?_log_from=rss

- Collapse -

Troj/Invo-Zip

by Marianna Schmudlach Oct 29, 2008 1:53AM PDT

Category Viruses and Spyware

Type Trojan

Troj/Invo-Zip is a family of zip files that contain malware.

Members of Troj/Invo-Zip are usually sent in spam pretending to relate to an invoice or receipt, often one related to a UPS transaction or to tax.

http://www.sophos.com/security/analyses/viruses-and-spyware/trojinvozip.html?_log_from=rss

- Collapse -

Troj/Fakevir-GU

by Marianna Schmudlach Oct 29, 2008 1:54AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojfakevirgu.html?_log_from=rss

- Collapse -

Troj/Agent-IBX

by Marianna Schmudlach Oct 29, 2008 1:55AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojagentibx.html?_log_from=rss

- Collapse -

Mal/RarMal-C

by Marianna Schmudlach Oct 29, 2008 1:56AM PDT

Category Viruses and Spyware

Type Malicious Behavior

Mal/RarMal-C is a family of malicious RAR archives, often seen in spam.

http://www.sophos.com/security/analyses/viruses-and-spyware/malrarmalc.html?_log_from=rss

- Collapse -

Troj/Swizzor-OK

by Marianna Schmudlach Oct 29, 2008 1:57AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojswizzorok.html?_log_from=rss

- Collapse -

Troj/FakeAle-JE

by Marianna Schmudlach Oct 29, 2008 2:16AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojfakealeje.html?_log_from=rss

- Collapse -

Troj/FakeAle-JD

by Marianna Schmudlach Oct 29, 2008 2:19AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojfakealejd.html?_log_from=rss

- Collapse -

Troj/Agent-IBZ

by Marianna Schmudlach Oct 29, 2008 2:20AM PDT

Category Viruses and Spyware

Type Trojan

Troj/Agent-IBZ is a Trojan for the Windows platform.

When first run Troj/Agent-IBZ copies itself to <System>\rs32net.exe.

The following registry entry is created to run rs32net.exe on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
rs32net
<System>\rs32net.exe

http://www.sophos.com/security/analyses/viruses-and-spyware/trojagentibz.html?_log_from=rss

- Collapse -

Troj/Agent-IBY

by Marianna Schmudlach Oct 29, 2008 2:21AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojagentiby.html?_log_from=rss

- Collapse -

Troj/PDFEx-AF

by Marianna Schmudlach Oct 29, 2008 3:06AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojpdfexaf.html?_log_from=rss

- Collapse -

Troj/PDFEx-AE

by Marianna Schmudlach Oct 29, 2008 3:07AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojpdfexae.html?_log_from=rss

- Collapse -

Troj/Mdrop-BWM

by Marianna Schmudlach Oct 29, 2008 3:10AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojmdropbwm.html?_log_from=rss

- Collapse -

Troj/FakeAle-JC

by Marianna Schmudlach Oct 29, 2008 3:11AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojfakealejc.html?_log_from=rss

- Collapse -

Troj/Dwnldr-HJT

by Marianna Schmudlach Oct 29, 2008 3:13AM PDT

Category Viruses and Spyware

Type Trojan

Affected operating systems Windows

http://www.sophos.com/security/analyses/viruses-and-spyware/trojdwnldrhjt.html?_log_from=rss

- Collapse -

Troj/Dloadr-BXH

by Marianna Schmudlach Oct 29, 2008 3:14AM PDT

Category Viruses and Spyware

Type Trojan

Troj/Dloadr-BXH is a Trojan for the Windows platform.

Troj/Dloadr-BXH copies itself to the System32 folder as CbEvtSvc.exe.

http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrbxh.html?_log_from=rss

- Collapse -

Troj/Cmjspy-AJ

by Marianna Schmudlach Oct 29, 2008 3:15AM PDT

Aliases the BackDoor-CEP.svr trojan

Category Viruses and Spyware

Type Trojan

Troj/Cmjspy-AJ is a Trojan for the Windows platform.

Troj/Cmjspy-AJ attempts to connect to a remote website.

Troj/Cmjspy-AJ deletes itself on execution and copies itself to:
<System>\Bifrost\<Trojan Filename>

Troj/Cmjspy-AJ creates the following files:

<UserProfile>\Application Data\addon.dat
<System>\Bifrost\klog.dat

Klog.dat and addon.dat are not malicious and they can be safely deleted.

Troj/Cmjspy-AJ creates the following Registry entries:

HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{9B71D88C-C598-4935-C5D1-43AA4DB90836}
stubpath
<System>\Bifrost\<Trojan Filename> s

Registry entries are created under HKCU\Software\Bifrost and HKLM\Software\Bifrost

http://www.sophos.com/security/analyses/viruses-and-spyware/trojcmjspyaj.html?_log_from=rss

- Collapse -

Troj/Agent-ICA

by Marianna Schmudlach Oct 29, 2008 3:16AM PDT

Category Viruses and Spyware

Type Trojan

Troj/Agent-ICA is a Trojan for the Windows platform.

Troj/Agent-ICA includes functionality to access the internet and communicate with a remote server via HTTP.

http://www.sophos.com/security/analyses/viruses-and-spyware/trojagentica.html?_log_from=rss

VIRUS \ Spyware ALERTS - October 29, 2008

CNET Forums

Other Forums

Forum Info