1/28: JS.SecurityToolFraud.C Downloads Fake Security Tool--And Other Malware You Should Know About

W32.Ackantta!gen Heuristic Detection

W32.Ackantta!gen is a heuristic detection used to detect threats associated with the W32.Ackantta@mm family. More information can be found at this Symantec page.

JS.SecurityToolFraud.C Downloads Fake Security Tool

JS.SecurityToolFraud.C is a heuristic detection for JavaScript files that attempt to trick users into downloading files that are detected by Symantec products as SecurityToolFraud. More information can be found at this Symantec page.

W32.Ircbrute.B Copies to Removable Drives

W32.Ircbrute.B is a worm that spreads by copying itself to removable drives. It also opens a back door on the compromised computer. More information can be found at this Symantec page.

Bredo-AI Creates Malicious File

Bredo-AI is a worm for the Windows platform. It includes functionality to run automatically. When installed it creates the file <Windows>taskhost.exe. More information can be found at this Sophos page.

Agent-MHR Windows Trojan

Agent-MHR is a Trojan for the Windows platform. It includes functionality to run automatically. When installed the following files are created <Windows>admintxt.txt and <Windows>livemessenger.exe.More information can be found at this Sophos page.

Agent-MHS Creates Malicious Files

Agent-MHS is a Trojan for the Windows platform. It includes functionality to run automatically. When installed it creates the file <User>Application DataAdobeUpdatecorwid.dat. More information can be found at this Sophos page.

Agent-MHT Windows Trojan

Agent-MHT is a Trojan for the Windows platform. When installed it creates the file <Windows>w@ndows.exe. More information can be found at this Sophos page.

Banker-EWA Steals Confidential Information

Banker-EWA is a Trojan for the Windows platform. It includes functionality to steal confidential information, access the internet and communicate with a remote server via HTTP. More information can be found at this Sophos page.