Prevent Online Threats

Archive for November, 2006

Trojan.Win32.Qhost.gl

Tuesday, November 28th, 2006

This Trojan is a modified Windows %System%\drivers\etc\hosts file, which is used to translate domain names (DNS) to IP addresses. The file is modified in such a way as to prevent the user from viewing the sites listed below.

The following strings are added to the hosts file.

# System Hosts…

Trojan.VBS.Seeker.g

Tuesday, November 28th, 2006

This Trojan is a VBS script. The file is 1,069 bytes in size.

Trojan.JS.Seeker.ae

Tuesday, November 28th, 2006

This Trojan is a JavaScript file. The file is 1,156 bytes in size.

Trojan-Dropper.Java.Xideo

Tuesday, November 28th, 2006

This Trojan is designed to install other Trojan programs to the victim machine without the knowledge or consent of the user. It is written in Java. The file is 42,155 bytes in size.

Trojan-Clicker.HTML.IFrame.g

Tuesday, November 28th, 2006

This Trojan opens web links without the knowledge or consent of the user. It is an HTML file. The file is 483 bytes in size.

Email-Worm.Win32.Warezov.gl

Wednesday, November 22nd, 2006

This worm spreads via the Internet as an attachment to infected messages. The attachment doesn’t contain a copy of the worm, but a component which is able to download other malicious programs via the Internet.

Infected messages are sent to email addresses harvested from the victim machine….

Trojan-Downloader.Win32.Stubby.a

Tuesday, November 21st, 2006

This Trojan will download files from the Internet without the user’s knowledge or consent and launch them for execution on the victim machine. The program itself is a Windows PE EXE file. The file is 81,920 bytes in size. It is written in C++.

Installation

In order to ensure that the…

Trojan-Clicker.Win32.Ipons

Tuesday, November 21st, 2006

This Trojan opens a range of Internet sites without the knowledge or consent of the user. It is a Windows PE EXE file. The file is 73,728 bytes in size. It is written in Visual Basic.

Trojan-Downloader.Win32.Nurech.l

Tuesday, November 21st, 2006

This Trojan downloads other malicious programs from the Internet and installs them to the victim machine without the user’s knowledge or consent. The program itself is a Windows PE EXE file. The file is 5554 bytes in size. It is packed using FSG 2.0. The unpacked file is 32KB in size. It is…

Trojan-Spy.Win32.OICQlog

Monday, November 20th, 2006

This is a Trojan spy program. The program itself is a Windows PE DLL file. It is written in Visual C++. It is not packed in any way. The file is 49,152 bytes in size.

Trojan-Downloader.Win32.Small.cdk

Monday, November 20th, 2006

This Trojan will download and launch new versions of itself on the victim machine, without the user’s knowl-edge or consent. It is a Windows PE EXE file. The file is approximately 6KB in size. It is packed using NsPack. The unpacked file is approximately 32KB in size. It is written in…

Trojan-Downloader.VBS.Iwill.a

Monday, November 20th, 2006

This Trojan downloads other malicious programs. This Trojan downloader is an html page containing a script. It is written in vbs. The Trojan can be found on webpages.

Trojan-PSW.VBS.Half

Monday, November 20th, 2006

This Trojan steals user passwords. It is a VBScript virus. The file is 977 bytes in size. The Trojan can be found on webpages. It steals passwords from Win9x systems.

Trojan.Win32.KillAV.id

Monday, November 20th, 2006

This Trojan terminates a number of legal applications. It is a Windows PE EXE file. It is 3104 bytes in size, and packed using UPX. The unpacked file is approximately 13KB in size.

Trojan-Downloader.Win32.Murlo.eb

Monday, November 20th, 2006

This Trojan downloads files via the Internet without the user’s knowledge or consent.

It is a Windows PE EXE file. It is packed using AsPack. The file is 20,480 bytes in size. The unpacked file is approximately 58KB in size.

Installation

The Trojan launches with the following parameters:…


Spyware Removal Spyware Protection Tools