Prevent Online Threats

Archive for May, 2007

Trojan-Spy.Win32.Delf.ig

Friday, May 11th, 2007

This Trojan spy program is a Windows PE EXE file. It is written in Borland Delphi. The size of the infected file may vary between 12KB to 36KB. Infected files may be packed with a range of packers.

Trojan-Downloader.Win32.Sandesa.15

Friday, May 11th, 2007

This Trojan is able to generate other Trojan programs.
It is a Windows PE EXE file. The file is 299,008 bytes in size. It is packed using UPX. The unpacked file is approximately 645KB in size. It is written in Borland Delphi.

Trojan-Downloader.Win32.Sandesa.11

Friday, May 11th, 2007

This Trojan is able to generate other Trojan programs.
It is a Windows PE EXE file. The file is 222,208 bytes in size. It is packed using UPX. The unpacked file is approximately 555KB in size. It is written in Borland Delphi.

not-a-virus:NetTool.Win32.Calc-DNet.i

Friday, May 11th, 2007

This is a distributed.net client. It is a Windows PE EXE file. It is written in C++. The file is 222,720 bytes in size. It is packed using PECompact. The unpacked file is approximately 446KB in size.

Trojan.Win32.Qhost.hx

Friday, May 11th, 2007

This Trojan is a modified Windows %System%\drivers\etc\hosts file, which is used to map domain names (DNS) to IP addresses. The modified file is 1945 bytes in size. The file is modified in such a way as to prevent the user from viewing the sites listed below.
The following strings are added to the…

Trojan-Downloader.Win32.Nurech.bm

Friday, May 11th, 2007

This Trojan downloads files via the Internet without the knowledge or consent of the user. It is a Windows PE EXE file. The file is 20,480 bytes in size.

Installation

When launched, the Trojan copies its executable file to the Windows system directory:

%System%\isxa.exe

The Trojan also adds…

Trojan-PSW.Win32.Mike

Friday, May 11th, 2007

This Trojan program is designed to steal user passwords. It is a Windows PE EXE file. The file is 23,040 bytes in size. It is written in Visual Basic.

Trojan.DOS.DelAll.d

Friday, May 11th, 2007

This Trojan is an MS-DOS (MZ-EXE) file. It is written in Turbo Pascal. It is not packed in any way. The file is 5,136 bytes in size.

Trojan.VBS.KillAV.o

Friday, May 11th, 2007

This Trojan is written in Visual Basic Script. It is 471 bytes in size.

Trojan-Downloader.Win32.Swizzor.t

Friday, May 11th, 2007

This Trojan downloads software via the Internet without the knowledge or consent of the user. The program itself is a Windows PE EXE file. The file is 11 288 bytes in size. It is written in C++.

Trojan.Win32.KillWin.cl

Friday, May 11th, 2007

This Trojan damages system functionality. It is a Windows PE EXE file. It is 134,144 bytes in size. It is packed using UPX. The unpacked file is approximately 982KB in size.
Installation
The Trojan also adds a link to its executable file in the system registry, ensuring that it will be launched…

Worm.VBS.Netlog.h

Friday, May 11th, 2007

This worm is 1 851 bytes in size. It is written in Visual Basic Script (VBS).

It spreads by copying itself to other computers on the local network.

Email-Worm.Win32.Bagle.gt

Friday, May 11th, 2007

This worm spreads via the Internet as an attachment to infected messages. Infected messages will be sent to all email addresses harvested from the victim machine.

The worm is also able to download other files from the Internet without the knowledge or consent of the user.

The worm itself is a PE…

DoS.Perl.Fusion

Friday, May 11th, 2007

This malicious program is designed to conduct Denial of Service attacks on a remote server. The program itself is a malicious script written in Perl. It is 1277 bytes in size.

Backdoor.Win32.Protux.n

Friday, May 11th, 2007

This Trojan provides a remote malicious user with access to the victim machine. It is a Windows PE EXE file. Modifications of this program’s components vary in size, from 9KB to 62KB.

Installation

When launched, the backdoor copies its executable file to the Windows system directory:…


Spyware Removal Spyware Protection Tools