Articles by eSecurityPlanet.com Staff

6/30: W32.SillyFDC.BCD Copies Itself to Removable Drives

W32.SillyFDC.BCD is a worm that spreads by copying itself to removable drives.

6/30: W32.Ackantta.F@mm is Mass-mailing Worm

W32.Ackantta.F@mm is a mass-mailing worm that spreads through removable drives and sends an email that contains an attachment of itself. It may also download potentially malicious files from the Internet.

6/29: Bloodhound.Exploit.257 is Heuristic Detection

Bloodhound.Exploit.257 is a heuristic detection for potentially malicious files that may exploit vulnerabilities in order to perform further malicious actions.

6/29: VBS.Sasan Copies to Other Drives

VBS.Sasan is a worm that spreads by copying itself to other drives.

6/26: OSX_JAHLAV.B is OS X Malware

OSX_JAHLAV.B arrives as ActiveXsetup.dmg, which is a MAC OS X mountable Disk Image file. It contains a .PKG file which contains its malicious script and its component files.

6/26: Suspicious.Graybird.1 uses Detection Technology

Suspicious.Graybird.1 is a detection technology designed to detect entirely new malware threats without traditional signatures. This technology is aimed at detecting malicious software that has been intentionally mutated or morphed by attackers.

6/25: AntivirusAgentPro is Misleading App

AntivirusAgentPro is a misleading application that may give exaggerated reports of threats on the computer.

6/25: W32.SillyFDC.BCC Copies Itself to Removable and Mapped Drives

W32.SillyFDC.BCC is a worm that spreads by copying itself to removable and mapped drives.

6/24: Packed.Generic.238 is Heuristic Detection

Packed.Generic.238 is a heuristic detection for files that may have been obfuscated or encrypted in order to conceal them from antivirus software.

6/24: IACommand is Remote Access App

IACommand is a program that may be installed as part of a remote access application.

Pentagon to Set up Cyber Command

Realizing the nature of modern warfare, the Cyber Command will direct the U.S. military's efforts to protect its computer infrastructure.

6/23: ErrorFix Exaggerates Threat Reports

ErrorFix is a misleading application that may give exaggerated reports of threats on the computer.

6/23: Trojan.Spadenf Sends Spam

Trojan.Spadenf is a Trojan horse that downloads files and sends spam emails from the compromised computer.

6/22: Bloodhound.Exploit.244

Bloodhound.Exploit.244 is a heuristic detection for files attempting to exploit the Microsoft DirectX DirectShow QuickTime Video Remote Code Execution Vulnerability (BID 35139).

6/22: Troj/Agent-KGG is Windows Trojan

Troj/Agent-KGG is Windows Trojan.

6/19: Bloodhound.Exploit.256 is Heuristic Detection

Bloodhound.Exploit.256 is a heuristic detection for files attempting to exploit the Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities (BID 32608).

6/19: Troj/DwnLdr-HTJ Sets a Registry Entry

Troj/DwnLdr-HTJ is a Trojan for the Windows platform. When run Troj/DwnLdr-HTJ creates a file \reset5c.dll (detected as Troj/DwnLdr-HTJ) and a registry entry.

6/18: Bloodhound.PDF.15 Detects Encrypted Files

Bloodhound.PDF.15 is a heuristic detection for files that may have been obfuscated or encrypted in order to conceal them from antivirus software.

6/18: Bloodhound.Exploit.250 is a Heuristic Detection

Bloodhound.Exploit.250 is a heuristic detection for files attempting to exploit the Microsoft Excel Field Sanitization Remote Code Execution Vulnerability.

6/17: Suspicious.S.Vundo.3 is Detection Technology

Suspicious.S.Vundo.3 is a detection technology designed to detect entirely new malware threats without traditional signatures. This technology is aimed at detecting malicious software that has been intentionally mutated or morphed by attackers.

6/17: Troj/Agent-KEV Set Registry Entries

Troj/Agent-KEV is a Trojan for the Windows platform that sets registry entries.

6/16: Trojan.Amoevae Exploits Windows Vulnerability

Trojan.Amoevae is a Trojan horse that exploits the Microsoft DirectX DirectShow QuickTime Video Remote Code Execution Vulnerability (BID 35139) to execute arbitrary code and download files on to the compromised computer.

6/15: VBS.Mutafrog!inf is a Detection for Infected Files

VBS.Mutafrog!inf is a detection for files infected with code that infects files and drops more malware on to the compromised computer.

6/12: Downloader.Lapurd May Download Files

Downloader.Lapurd is a Trojan horse that may download files on to the compromised computer.

6/12: W32.SillyFDC.BBT Spreads by Copying Itself

W32.SillyFDC.BBT is a worm that spreads by copying itself to removable and mapped drives.

6/10: Trojan.Iflar Sends Spam

Trojan.Iflar is a Trojan horse that sends email spam and gathers email addresses from the compromised computer.

6/10: Trojan.Cipevas Attempts to Steal Information

Trojan.Cipevas is a Trojan horse that attempts to steal information from the compromised computer.

6/10: Mal/Inject-P Drops and Executes Other Malware

Mal/Inject-P is a malicious program that drops and executes other malware.

6/9: Trojan.Ransomcrypt Issues a Ransom Demand

Trojan.Ransomcrypt is a Trojan horse that encrypts certain documents on the compromised computer, then issues a ransom demand.

6/9: Mal/PDFEx-F is PDF with Malware

Mal/PDFEx-F is a PDF file which contains malicious JavaScript.

6/8: W32/AutoRun-AEO Changes Registries

W32/AutoRun-AEO changes registries on compromised PC's.

6/8: W32/BatAuto-C Copies Itself to Several Drives

W32/BatAuto-C will enumerate and copy itself to man of a PC's drives.

6/4: Troj/Mdrop-CDA is Windows Trojan

Troj/Mdrop-CDA is a Windows Trojan.

6/2: Troj/Delf-FCK is Low Prevalence Trojan

Troj/Delf-FCK is a low prevalence Trojan.

6/2: Mal/Sharbi-B is Windows Malware

Mal/Sharbi-B is Windows malware.

6/2: Mal/Nuwar-A is Windows Worm

Mal/Nuwar-A is a worm for the Windows platform.

Articles by eSecurityPlanet.com Staff

Topic Centers

Articles by Type

Contact Us

More Security