Archive for April, 2007
Friday, April 6th, 2007
This Trojan program exploits a vulnerability in Microsoft Internet Explorer to launch other Trojan programs on the victim machine. It is an HTML page; when the page is loaded, other malicious code written in Visual Basic Script will be executed.
Posted in Virus Threats | Comments Off
Friday, April 6th, 2007
This Trojan downloads files from the Internet to the victim machine and launches them for execution. The Trojan itself is a Windows PE EXE file. It is 16 896 bytes in size, and packed using UPX. The unpacked file is approximately 44KB in size. It is written in C++.
Posted in Virus Threats | Comments Off
Friday, April 6th, 2007
This Trojan intercepts confidential user data. It is a Windows PE EXE file, 29KB in size, packed using MEW. The unpacked file is approximately 225KB in size.
Installation
When launched, the Trojan extracts from itself the following file, which is 41,472 bytes in size:
%System%\msie.dll
The…
Posted in Virus Threats | Comments Off
Thursday, April 5th, 2007
This virus scans the victim machine for executable files and infects them. The virus itself is a Windows PE EXE file. It is written in Visual Basic. It is not packed in any way. The file is 348 160 bytes in size.
Installation
Once launched, the virus copies itself to the Windows root, system and…
Posted in Virus Threats | Comments Off
Wednesday, April 4th, 2007
This worm spreads via the Internet as an attachment to infected messages. The attachment does not contain a copy of the worm, but a component which downloads other malicious programs via the Internet.
Infected messages will be sent to all email addresses harvested from the victim machine.
The…
Posted in Virus Threats | Comments Off
Tuesday, April 3rd, 2007
This worm spreads via the Internet as an attachment to infected messages. The attachment does not contain a copy of the worm, but a component which downloads other malicious programs via the Internet.
Infected messages will be sent to all email addresses harvested from the victim machine.
The…
Posted in Virus Threats | Comments Off
Tuesday, April 3rd, 2007
This Trojan downloads other malicious programs. It is a Windows PE EXE file. It is written in Microsoft Visual C++. It is not packed in any way. The size of infected files may vary from 20KB to 27KB.
Posted in Virus Threats | Comments Off
Tuesday, April 3rd, 2007
This Trojan downloads other programs via the Internet and launches them on the victim machine without the user’s knowledge or consent. The program itself is a Windows PE EXE file. It is 8,704 bytes in size. It is packed using UPX. The unpacked file is approximately 40KB in size. It is…
Posted in Virus Threats | Comments Off
Monday, April 2nd, 2007
This Trojan uses spoofing technology. It is a fake HTML page. It is designed to steal confidential information from BB&T clients.
The Trojan arrives in the guise of an important email from BB&T:
The email contains a link which exploits the Frame Spoof vulnerability in Internet Explorer.
If the…
Posted in Virus Threats | Comments Off
Monday, April 2nd, 2007
This Trojan is designed to steal user passwords. It is a Windows PE EXE file. It is 18,944 bytes in size.
Posted in Virus Threats | Comments Off
Monday, April 2nd, 2007
This Trojan is an HTML file. It is 1,824 bytes in size.
Posted in Virus Threats | Comments Off
Monday, April 2nd, 2007
This Trojan is an HTML file. It is 2,316 bytes in size.
Posted in Virus Threats | Comments Off
Monday, April 2nd, 2007
This Trojan downloads other malicious programs. It is an HTML file. The file is 1,579 bytes in size. It is written in Java Script.
Posted in Virus Threats | Comments Off
Monday, April 2nd, 2007
This Trojan is designed to steal confidential data. It is a Windows PE EXE file. It is 363,520 bytes in size. It is packed using PECompact. The unpacked file is approximately 930 KB in size. It is written in Delphi.
Installation
The Trojan creates a folder called %Program Files%/pclog, and…
Posted in Virus Threats | Comments Off
Monday, April 2nd, 2007
This Trojan is designed to steal user passwords. It is a Windows PE EXE file. It is 9,728 bytes in size. It is not packed in any way.
Installation
This Trojan will be installed to the victim machine by other malicious programs.
When launched, the Trojan requires the system library svrapi.dll to be…
Posted in Virus Threats | Comments Off