Malware: Archive: November 2005

11/30: Nuclear Trojan Gives Hacker Control

Backdoor-Nuclear is a back door Trojan that gives an attacker full control over the compromised computer.

11/30: Rontokbro-T Worm is in Attachment

Worm-Rontokbro-T propagates by sending a copy of itself as an attachment to email messages.

11/30: Ritdoor-D Worm Runs in Background

W32/Ritdoor-D is a worm and backdoor Trojan for the Windows platform.

11/30: AVKiller-V Trojan Downloads File

AVKiller-V is a Trojan that attempts to download and run a file that belongs to another Trojan detected as Banker.BHD from a certain website.

11/30: Viewpoint an Unwanted Application

Viewpoint is not a virus or a Trojan. It is detected as a 'potentially unwanted program.'

11/30: Bagle-AS a Backdoor Trojan

Troj/Bagle-AS is a backdoor Trojan.

11/30: Rasdoor-D a Backdoor Trojan

Troj/Rasdoor-D is a backdoor Trojan for the Windows platform.

11/30: BagDl-Gen Multi-Component Trojans

Troj/BagDl-Gen is a family of multi-component Trojans.

11/30: Kelvir-BF Worm Spreads to AIM

W32/Kelvir-BF is a worm for the Windows platform.

11/30: Secefa-B Worm Drops 2nd Threat

W32-Secefa-B is a worm that drops another threat onto the compromised computer.

11/30: Trojan-Bookmarker-J Hits IE

Trojan-Bookmarker-J is a Trojan horse that modifies Internet Explorer settings by changing the home page and search page, and by adding Web sites to the Favorites menu.

ISPs Making Progress on Spam

A new FTC study shows filters block as much as 95 percent of unsolicited messages.

11/29: Traxg-F a Windows Worm

W32/Traxg-F is a worm for the Windows platform.

11/29: Mytob-FZ a Mass-Mail Worm, Trojan

W32/Mytob-FZ is a mass-mailing worm and backdoor Trojan that can be controlled through the Internet Relay Chat (IRC) network.

11/29: Sdranck-V a Multi-Component Worm

W32/Sdranck-V is a multi-component network worm.

11/29: SymOS-Drever-D Disables Software

SymbOS-Drever-D is a Trojan horse that disables Simworks Symbian Anti-Virus software.

11/29: Trojan-Spamforo Spends Spam

Trojan-Spamforo is a Trojan horse that sends out spam emails.

11/29: SymbOS-Doomboot-P Hits Phones

SymbOS-Doomboot-P is a Trojan horse that affects Symbian series 60 phones and disables several applications on the compromised device.

11/29: SymbOS-Ruhag-C Uses Symbian OS

SymbOS-Ruhag-C is a Trojan horse that runs on the Symbian operating system that is used in Nokia Series 60 cellular telephones.

11/29: Trojan-Lodav-C Lowers Security

Trojan-Lodav-C is a Trojan horse that attempts to lower security settings on the compromised computer.

11/29: Iefeat-AR a Downloader, Trojan

Troj/Iefeat-AR is a downloader and browser hijacking Trojan.

11/29: Bagle-AP Trojan Copies to Folder

Upon execution, Troj-Bagle-AP drops a copy of itself and other files in the Windows system folder.

11/29: Looksky-D Worm in an Attachment

Worm-Loosky-D arrives as an attachment to an email message.

11/28: SymbOS-Doomboot-P Hits Cell Phones

SymbOS-Doomboot-P is a Trojan horse that affects Symbian series 60 phones and disables several applications on the compromised device.

11/28: Francette-Y Worm Also an IRC Trojan

W32/Francette-Y is a worm and IRC backdoor Trojan for the Windows platform.

11/28: PWS-Banker-AS Trojan Spams

PWS-Banker-as is a member of a Trojan family that consists of at least three variants at the time of writing.

11/28: Symbos-Skulls-Q Infects Mobile Phones

Symbos-Skulls-Q is a Symbos-Skulls variant that is capable of infecting mobile phones running the Symbian OS with the Series 60 Platform user interface.

11/28: Mytob-FY a Mass-Mail Worm, Trojan

W32/Mytob-FY is a mass-mailing worm and backdoor Trojan that can be controlled through the Internet Relay Chat (IRC) network.

11/28: IRCBot-AO an IRC Trojan

Troj/IRCBot-AO is an IRC backdoor Trojan for the Windows platform.

11/28: Mytob-AT a Mass-Mail Worm and Trojan

W32/Mytob-AT is a mass-mailing worm and IRC backdoor Trojan.

11/28: Bankem-I Trojan Grabs Passwords

Troj/Bankem-I is a password-stealing Trojan for the Windows platform.

11/28: Worm_Mytob-NB Uses Own Engine

Similar to other MYTOB variants, Worm-Mytob-NB propagates by sending a copy of itself as an attachment to an email message, which it sends to target recipients using its own Simple Mail Transfer Protocol (SMTP) engine.

11/28: Rbot-LT Worm, Trojan Lets Hackers In

W32/Rbot-LT is a network worm that contains IRC backdoor Trojan functionality, allowing unauthorized remote access to the infected computer.

11/23: Symbos_PBSteal-A Affects Mobile Devices

Symbos_PBSteal-A is Symbian malware and affects mobile devices running the Symbian operating system with the Series 60 Platform user interface.

11/23: Symbos_Skulls-P Affects Mobile Phones

Symbos_Skulls-P is a Symbos_Skulls variant that affects mobile phones running Symbian OS with the Series 60 Platform user interface.

11/23: Mytob-FS Worm Controlled Via IRC

W32/Mytob-FS is a mass-mailing worm and backdoor Trojan that can be controlled through the Internet Relay Chat (IRC) network.

11/23: Danmec-A Trojan Opens Port to Attackers

Troj/Danmec-A is a Trojan for the Windows platform.

11/22: Sober-AG Worm a 'Medium Threat Alert'

Trend Micro has issued a medium threat alert for Worm_Sober-AG, which propagates by attaching a copy of itself to an email message, which it sends to target recipients using its own Simple Mail Transfer Protocol (SMTP) engine.

11/22: Mytob-MS Worm Uses Own Engine

Worm_Mytob-MS propagates by attaching a copy of itself to an email message, which it sends to target recipients using its own Simple Mail Transfer Protocol (SMTP) engine.

11/22: Mytob-MV Worm Uses Own Engine

Worm_Mytob-MV propagates by sending copies of itself as an attachment to email messages, which it sends to target recipients, using its own Simple Mail Transfer Protocol (SMTP) engine.

11/22: Trojan-Goldun-H Steals Passwords

Trojan-Goldun-H is a Trojan horse that attempts to steal passwords entered on the www.e-gold.com domain.

11/22: Robt-AYA Worm Exploits Flaws

W32/Rbot-AYA is a worm with backdoor functionality for the Windows platform.

11/22: Mytob-FR a Mass-Mail Worm and Trojan

W32/Mytob-FR is a mass-mailing worm and backdoor Trojan that can be controlled through the Internet Relay Chat (IRC) network.

11/22: Sober-AH Worm Ends Processes

Sober-AH is a worm that ends several processes belonging to some security tools, among others.

11/22: Trojan-Danmec Sends Information

Trojan-Danmec is a Trojan horse that sends information about the infected computer to a remote attacker.

11/22: SymbOS-PBstealer-A a Cell Phone Trojan

SymbOS-Pbstealer-A is a Trojan horse that runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones.

11/22: Mogi Worm Spreads Via File Sharing

W32.Mogi is a worm that spreads through file-sharing networks.

11/22: Proxy-Y a Proxy Trojan

Troj/Proxy-Y is a proxy Trojan for the Windows platform.

11/22: Agent-FE Trojan Access Internet

Troj/Agent-FE is a Trojan for the Windows platform.

11/22: Mytob-MC Worm Lowers Security Settings

W32.Mytob-MC@mm is a mass-mailing worm that opens a back door and lowers security settings on the compromised computer.

11/22: Sober-Y Worm Sends English or German Emails

Like the previous variants, Sober-Y worm sends itself inside a ZIP archive as an attachment in e-mail messages with English or German texts.

11/22: Mytob-MU Worm Arrives as Attachment

Worm_Mytob-MU spreads copies of itself as attachments to email messages that it sends to target recipients using its own Simple Mail Transfer Protocol (SMTP) engine.

Unpatched IE Flaw Now Exploitable

Security firm published proof-of-concept code for a six-month-old unpatched IE flaw.

11/21: Sober-X Worm Still Spreading

For the second time this month, some security vendors have issued alerts for W32/Sober-X, a worm that emails messages in German to addresses found in files on the hard disk.

11/21: Mytob-MQ Worm Uses Own Engine

Like other Mytob variants, Worm-Mytob-MQ spreads copies of itself via network shares and as attachments to email messages that it sends to target recipients using its own Simple Mail Transfer Protocol (SMTP) engine.

AIM Worm Has Middle East Connection

A security company reports that a recent AIM rootkit worm is being exploited by an unspecified group of crackers in the Middle East.

11/21: Mytob-LZ a Mass-Mail Worm

W32.Mytob-LZ@mm is a mass-mailing worm that also spreads through network shares and by exploiting a vulnerability.

11/21: Feutel-AI a Backdoor Trojan

Troj/Feutel-AI is a backdoor Trojan for the Windows platform.

11/21: Mytob-FP a Worm and Trojan

W32/Mytob-FP is a mass-mailing worm and backdoor Trojan that can be controlled through the Internet Relay Chat (IRC) network.

11/21: RemLoad-A Trojan Contacts Server

Troj/RemLoad-A is a Trojan for the Windows platform.

11/21: QQRob-Y a Password-Stealng Trojan

Troj/QQRob-Y is a password-stealing Trojan for the Windows platform.

11/21: Brontok-G an Email Worm

For the second time in less than a week, security vendor Sophos has issued an alert for W32/Brontok-G, an email worm for the Windows platform.

Roping Off Quarantines in the Gateway

McAfee comes out with a quarantine manager to keep track of the different quarantines in a large environment.

11/21: Bancban-KA a Trojan Nabs Passwords

Troj/Bancban-KA is a password-stealing Trojan aimed at customers of Brazilian banks.

Senate Shot at Anti-Spyware

Legislation criminalizes unauthorized downloads and mandates disclosures of privacy threats.

11/18: Cosiam-E a Proxy Trojan

Troj/Cosiam-E is a proxy Trojan with backdoor capabilities.

11/18: Linux-Plupii-B Worm Exploits Flaws

Linux-Plupii-B is a worm with back door capabilities that spreads by exploiting vulnerabilities.

11/18: Keylog-AR a Keylogging Trojan

Troj/Keylog-AR is a keylogging Trojan for the Windows platform.

11/18: Backdoor-Naninf-B Lets Hackers In

Backdoor-Naninf-B is a Trojan horse program that allows a remote attacker to have unauthorized access to the compromised computer through IRC channels.

11/18: Mytob-FM a Worm and Backdoor

W32/Mytob-FM is a mass-mailing worm and IRC backdoor for the Windows platform.

11/17: Tilebot-BG a Worm and IRC Trojan

W32/Tilebot-BG is a worm and IRC backdoor Trojan for the Windows platform.

11/17: Zlob-BC a Downloader Trojan

Troj/Zlob-BC is a downloader Trojan.

11/17: Bancban-IL a Trojan Nabs Passwords

Troj/Bancban-IL is a password-stealing Trojan targeted at customers of Brazilian banks.

11/17: OF97/Toraja-I a Macro Virus

OF97/Toraja-I is a macro virus for the Microsoft Office 97 platform.

Patching Still Trips Up IT

This year's ''Laws of Vulnerabilities'' study shows that administrators are getting better at patching, but it's still not good enough.

11/17: Delf-PE an Info-Stealing Trojan

Troj/Delf-PE is an information-stealing Trojan for the Windows platform.

11/17: ALS-Bursted-B Virus Written in AutoCAD

ALS-Bursted-B is a virus that is written in the AutoCAD AutoLisp scripting language used by AutoCAD.

11/17: Backdoor-Foobot a Trojan Horse

Backdoor-Foobot is a Trojan horse that opens a back door on the compromised computer.

11/17: Tuckist Trojan Runs on Linux

Backdoor-Tuckist is a Trojan horse program that runs on Linux systems running kernel 2.2.x or 2.4.x.

11/17: PE-Bobax-AK an .EXE File Infector

PE-Bobax-AK is a file infector that infects all executable (.EXE) files running on the compromised machine.

11/16: Rbot-AAC Worm Spreads Via Shares

W32/Rbot-AAC is a network worm that attempts to spread via network shares.

11/16: Sober-AE Has German Message

Sober-AE is a worm that spreads via email, in a message written in English or German.

11/16: Sober-AD Sends German Emails

Sober-AD is a worm that spreads via email, in a message written in English or German.

11/16: Sober-X Worm Harvests Addresses

W32/Sober-X emails messages in German to addresses found in files on the hard disk.

11/16: Sober-AG Worm Spreading

Sober-AG is a worm that spreads via email, in a message written in English or German.

11/16: Sober-AF a Mass-Mailing Worm

Sober-AF is a worm that spreads via email, in a message written in English or German.

11/16: Sober-AC Worm Ends Processes

Sober-AC is a worm that ends several processes belonging to some security tools, among others.

11/16: Brontok-G an Email Worm

W32/Brontok-G is an email worm for the Windows platform.

11/16: Backdoor-Suckit a Linux Trojan

Backdoor-Suckit is a Trojan horse program that runs on Linux systems.

IM Virus Mutations Up the Security Threat

With IM malware increasingly creating a sea of variants, and email worms mutating into IM threats, analysts say it's time to focus on securing instant messaging.

11/16: Danrit Trojan Logs Keystrokes

Backdoor-Danrit is a Trojan horse that logs keystrokes and opens a back door.

11/16: Mario-C Worm has Fake Message

W32/Mario-C is a worm for the Windows platform.

11/16: ELF-Lupper-C an Executable Linux File

ELF-Lupper-C is an executable Linux file (ELF) that is a command line tool used in connecting to various ports.

11/15: Sober-U Worm Written in German

W32/Sober-u@MM is a mass mailing worm that may arrive in an email message.

11/15: Muquest Uses System as Proxy

Muquest is a Trojan horse that allows the compromised computer to be used as an HTTP, SOCKS4, or SOCKS5 proxy server.

11/15: Sober-V a Mass-Mailing Worm

W32/Sober-v@MM is a mass mailing virus written in Visual Basic.

11/15: SymbOS-Cardtrp-F Runs on Symbian OS

SymbOS-Cardtrp-F is a Trojan horse that runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones.

11/15: Sober-S a Mass-Mailing Worm

Some security vendors have issued alerts for W32/Sober-S, a mass-mailing worm.

11/15: Rbot-AXG Worm Has Backdoor

W32/Rbot-AXG is a network worm with backdoor functionality for the Windows platform.

11/15: Sober-R a Mass-Mailing Worm

W32/Sober-R is a mass-mailing worm.

11/15: Spybot-EF Worm Spreads by File Share

W32/Spybot-EF is a worm and IRC backdoor Trojan for the Windows platform.

11/15: Sober-T Virus Arrives in Email

W32/Sober.t@MM is a virus that may arrive in an email message.

11/15: Sober-W a Mass-Mailing Worm

W32/Sober-w@MM is a mass-mailing worm that may arrive in an email message.

11/15: Sober-L a Mass-Mailing Worm

W32/Sober-L is a mass-mailing worm for the Windows platform.

11/15: SymbOS-Cardtrp-G a Symbian OS Virus

SymbOS-Cardtrp-G is a Trojan horse that runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones.

11/15: Sober-AD Worm Spreads Via Email

Worm-Sober-AD propagates via email messages.

11/15: Chod-J Worm Spreads Via IM

Worm_Chod-J propagates via the popular instant messaging application MSN Messenger.

11/14: Banker-GV a Web Banking Trojan

Troj/Banker-GV is an Internet banking Trojan for the Windows platform.

11/14: Agobot-AWO Worm Drops Itself

Agobot-AWO worm propagates by dropping a copy of itself into network shares.

11/14: GrayBrd-EH Trojan Hits Server

Troj/GrayBrd-EH is a backdoor Trojan for the Windows platform.

11/14: Banker-HJ a Web Banking Trojan

Troj/Banker-HJ is an Internet banking Trojan.

11/14: Cager-B Trojan May be Downloaded

Troj-Cager-B may be downloaded from the Internet, dropped by another malware, or manually installed by a user.

11/14: Bancos-FR a Web Banking Trojan

Troj/Bancos-FR is an Internet banking Trojan.

11/14: Codbot-L Targets Weak Shares

W32/Codbot-L is a worm with backdoor functionality for the Windows platform.

End Users are Clueless -- and it's IT's Fault

Columnist Linda LeBlanc says end users are causing most of their own problems... and IT is to blame.

Microsoft to Block Sony DRM Rootkit

Redmond joins others hot on rootkit trail.

FBI Hunkered in the Bunker

Somewhere in downtown Washington, D.C., cyber G-men are engaging the bad guys.

11/14: Mytob-ML Worm Uses Own Engine

Upon execution, Worm-Mytob-ML drops a copy of itself as any of a certain file in a specified location.

11/14: Bancban-IA Steals Passwords

Troj/Bancban-IA is a password-stealing Trojan for the Windows platform.

11/11: Francette-W Worm also a Trojan

W32/Francette-W is a worm and IRC backdoor Trojan for the Windows platform.

11/11: Clagger-A a Downloader Trojan

Troj/Clagger-A is a downloader Trojan for the Windows platform.

11/11: Mytob-FK Worm Controlled Via IRC

W32/Mytob-FK is a mass-mailing worm and backdoor Trojan that can be controlled through the Internet Relay Chat (IRC) network.

11/11: RKPort-Fam Trojans Hide Info

Troj/RKPort-Fam is a family of kernel-mode driver rootkits.

11/11: Backdoor-Ryknos-B Hides Itself

Backdoor-Ryknos-B is a minor variant of Backdoor-Ryknos, a Trojan horse that attempts to utilize the SecurityRisk.First4DRM security risk to hide itself on the compromised computer.

11/11: Stinx-F Trojan Links to IP Addresses

Troj/Stinx-F is a backdoor Trojan for the Windows platform.

11/11: Bloodhound-Exploit-52 Sniffs Flaw

Bloodhound-Exploit-52 is a heuristic detection for the Flash Player 7 Improper Memory Access Vulnerability, as described in MPSB05-07.

11/11: Badgrad-B a Windows Worm

W32/Badgrad-B is a worm for the Windows platform.

Trojan Exploits Sony's DRM Flaw

The release of a Trojan horse that exploits Sony's controversial copy 'cloaking' tool is raising fears among users and music lovers around the globe.

11/11: XCP a Rootkit Program

XCP is a rootkit, which is a program used in order to hide files, processes and entries in the Windows Registry.

11/11: KillFyl-AC Trojan After Money

KillFyl-AC is a non-memory resident Trojan that displays a behavior similar to ransomware, wherein the malware author asks for money in exchange for file restoration on affected systems.

11/11: Kondeli Uses Plug-and-Play Flaw

Trojan-Kondeli is a Trojan horse that exploits the Microsoft Windows Plug and Play Buffer Overflow Vulnerability (described in Microsoft Security Bulletin MS05-039).

11/10: Stinx-E Trojan Runs in Background

Troj/Stinx-E is a backdoor Trojan for the Windows platform.

11/10: Backdoor-Ryknos Trojan Hides Itself

Backdoor-Ryknos is a Trojan horse that utilizes SecurityRisk.First4DRM to hide itself on the compromised computer.

11/10: ZDown-A Trojan Installs Software

Troj/ZDown-A is a downloader Trojan that will download, install and run new software without notification that it is doing so.

11/10: Stando-A Worm Copies Itself

W32/Stando-A is a worm for the Windows platform.

11/10: SymbOS-Doomboot-M Disguises Itself

SymbOS-Doomboot-M is a Trojan horse that drops corrupt files onto the compromised device.

11/10: Appflet-B a Mass-Mail Worm

W32/Appflet-B is a mass-mailing worm for the Windows platform that sends itself out to email addresses harvested from the infected computer.

11/10: SymbOS-Doomboot-N Drops Files

SymbOS-Doomboot-N is a Trojan horse that drops corrupt files onto the compromised device.

11/10: Ryknos-A Backdoor Opens Port

Ryknos-A is a backdoor that opens the port 8080 and connects to several IP addresses in order to receive remote control commands to carry out on the affected computer.

11/10: Breplibot-C Backdoor is an Attachment

Bkdr-Breplibot-C is a backdoor that arrives on a system as an attachment in spammed email messages.

11/10: Heoms a Korean-Based Trojan Horse

Heoms is a Korean-based Trojan horse that monitors URLs visited in Internet Explorer and sends this information to a remote Web site.

11/10: Feutel-AD a Backdoor Trojan

Troj/Feutel-AD is a backdoor Trojan for the Windows platform.

11/10: Bancban-HX Trojan Steals Info

Troj/Bancban-HX is a Trojan that attempts to steal information related to various banking websites.

11/9: Rbot-AWI Worm Exploits Flaws

W32/Rbot-AWI is a worm and IRC backdoor Trojan for the Windows platform.

11/9: Rbot-AWH a Worm and Trojan

W32/Rbot-AWH is a worm and IRC backdoor Trojan for the Windows platform.

11/9: Rbot-AWZ Worm also a Trojan

W32/Rbot-AWZ is a network worm with backdoor Trojan functionality for the Windows platform.

11/9: Rbot-AWM Worm Has Trojan Functions

W32/Rbot-AWM is a network worm with backdoor Trojan functionality for the Windows platform.

11/9: Mytob-FI a Mass-Mailing Worm

W32/Mytob-FI is a mass-mailing worm and backdoor Trojan that can be controlled through the Internet Relay Chat (IRC) network.

11/9: Rbot-AXA Worm has Backdoor

W32/Rbot-AXA is a network worm with backdoor Trojan functionality for the Windows platform.

11/9: Dadobra-J Trojan Accesses Internet

Troj/Dadobra-J is a Trojan for the Windows platform.

11/9: Chode-L Worm Spreads Via IM

W32/Chode-L is a worm with IRC backdoor functionality.

11/9: Rbot-AWJ a Worm and IRC Trojan

W32/Rbot-AWJ is a worm and IRC backdoor Trojan for the Windows platform.

11/9: Tilebot-AX Worm Exploits Flaws

W32/Tilebot-AX is a worm and IRC backdoor Trojan for the Windows platform.

11/9: Rbot-AXB Worm Has Trojan Functions

W32/Rbot-AXB is a network worm with backdoor Trojan functionality for the Windows platform.

11/9: Accid-A Worm Spreads Via IM

W32/Accid-A is a worm that attempts to spread via MSN Messenger.

11/9: Khoobe-A Trojan Logs Key Presses

Troj/Khoobe-A is a Trojan for the Windows platform.

11/9: Tilebot-AY Worm Copies Itself

W32/Tilebot-AY is a network worm and backdoor Trojan for the Windows platform.

11/9: Sdbot-XH Worm Spreads Via Shares

W32/Sdbot-XH is a network worm with backdoor Trojan functionality for the Windows platform that spreads through network shares protected by weak passwords, MS-SQL servers and through various operating system vulnerabilities.

11/9: Aimbot-AN Worm Runs in Background

W32/Aimbot-AN is a worm and IRC backdoor Trojan for the Windows platform.

11/8: Ranck-DF Trojan Acts as Proxy

Troj/Ranck-DF is a Trojan for the Windows platform.

11/8: Shredl-B a Downloader Trojan

Troj/Shredl-B is a downloader Trojan for the Windows platform.

11/8: Nelo-A Worm Copies Itself

W32/Nelo-A is a worm for the Windows platform.

11/8: Elf_Lupper-A an Executable Linux File

Elf_Lupper-A is an executable Linux file that is a command line tool used in connecting to specific ports.

11/8: Rbot-CSI Worm Drops Copy of Itself

Worm-Rbot-CSI propagates across networks by dropping a copy of itself into network shares.

11/7: Haxdoor-AO a Windows Trojan

Troj/Haxdoor-AO is a Trojan for the Windows platform.

11/7: Bagle-AR a Mass-Mailing Worm

W32/Bagle-AR is a mass-mailing worm for the Windows platform.

11/7: Linux/Lupper Worm Exploits Servers

Linux/Lupper.worm spreads by exploiting web servers hosting vulnerable PHP/CGI scripts.

11/7: Ixbot-D a Worm and Trojan

W32/Ixbot-D is a worm and IRC backdoor Trojan for the Windows platform.

11/7: Linux-Plupii Worm Exploits Flaws

Linux-Plupii is a worm with back door capabilities that spreads by exploiting several Web server-related vulnerabilities.

11/7: Loosky-B a Multi-Component Worm

W32/Loosky-B is a multi-component email worm with Trojan functionality for the Windows platform.

11/4: Beagle-CO a Mass-Mail Worm

W32.Beagle-CO@mm is a mass-mailing worm that lowers security settings on the compromised computer.

11/4: Dnschange-F Trojan Sets DNS Server

Troj_Dnschange-F may arrive on an affected system as an attachment to email messages, which may be downloaded by affected users without knowledge of its malicious content.

11/4: Mytob-FI a Worm and Backdoor Trojan

W32/Mytob-FI is a mass-mailing worm and backdoor Trojan that can be controlled through the Internet Relay Chat (IRC) network.

11/4: VBbot-D Trojan Contacts URL

Troj/VBbot-D is a Trojan for the Windows platform.

11/4: WowPWS-A Trojan Nabs Passwords

Troj/WowPWS-A is a password-stealing Trojan for the Windows platform.

11/4: Haxdoor-AN Trojan Grants Access

Troj/Haxdoor-AN is a backdoor Trojan that allows a remote intruder to gain access and control over the computer.

11/4: Rbot-AVQ a Worm and IRC Trojan

W32/Rbot-AVQ is a worm and IRC backdoor Trojan for the Windows platform.

11/4: Rontokbro-L Worm Grabs Addresses

Worm-Rontokbro-L propagates by sending a copy of itself as an attachment to email messages.

11/4: Bankash-L a Password-Stealing Trojan

Troj/Bankash-L is a password-stealing Trojan for the Windows platform.

11/4: Rontokbro-M Worm Copies Itself

Worm_Rontokbro-M propagates by sending a copy of itself to email messages as KANGEN.EXE.

11/3: Mitglieder-FM Trojan Disables Services

Mitglieder-FM is a Trojan that prevents the user from accessing several websites, mostly belonging to antivirus companies, disables several system services, deletes certain files and several Windows Registry editing tools, etc.

11/3: Mitglieder-FL Trojan Runs File

Mitglieder-FL is a Trojan that attempts to download and run a file from different websites on the affected computer.

11/3: Mitglieder-FN Trojan Downloads File

Mitglieder-FN is a Trojan that attempts to download and run a file from different websites on the affected computer.

11/3: Esbot-B a Worm and IRC Trojan

W32/Esbot-B is a worm and IRC backdoor Trojan for the Windows platform.

11/3: BagleDL-AB Trojan Copies Itself

Troj/BagleDl-AB is a Trojan for the Windows platform.

11/3: Bagle-BQ Worm Spreads Via Email

Worm_Bagle-BQ propagates via email messages.

11/3: Tilebot-AP Worm Spreads to Shares

W32/Tilebot-AP is a worm that attempts to spread to remote network shares.

11/3: Bancban-HE a Banking Trojan

Troj/Bancban-HE is an internet banking Trojan for the Windows platform.

11/3: Trojan-Bankem Targets Bank Sites

Trojan-Bankem is a Trojan horse that searches for certain strings in Internet Explorer windows related to online banking Web sites.

11/3: Rbot-CMR Worm Drops Itself

Worm_Rbot-CMR propagates across networks by dropping a copy of itself into network shares.

11/3: Backdoor-Zagaban a Trojan Horse

Backdoor-Zagaban is a Trojan horse that allows the compromised computer to be used as a covert proxy.

11/3: Trojan-Lodear-C Downloads Files

Trojan-Lodear-C is a Trojan horse that attempts to download remote files.

11/3: Bagle-BS Worm Spreads Via Email

Worm_Bagle-BS propagates via email messages.

11/3: Dloader-AMC Trojan Executes Files

Troj_Dloader-AMC is a memory-resident Trojan that drops a copy of itself as WINLDR.EXE in the Windows system folder.

11/2: Dloader-AMC Trojan Doesn't Spread

Troj-Dloader-AMC is a Trojan application that is a malware with no capability to spread into other systems.

11/2: Mytob-KS Worm Uses Own Engine

Like other WORM-MYTOB variants, Worm-Mytob-KS spreads by attaching a copy of itself to an email message, which it sends to target recipients using its own Simple Mail Transfer Protocol (SMTP) engine.

11/2: Lodear Trojan Downloads Files

Trojan.Lodear is a Trojan horse that attempts to download remote files.

11/2: Beagle-CN Worm Uses Own Engine

W32.Beagle-CN@mm is a mass-mailing worm that uses its own SMTP engine to send out copies of Trojan.Lodear.

11/2: BagleDL-Z Trojan Executes Files

Troj/BagleDl-Z downloads files from a number of remote websites and executes them.

11/2: Spybot-ZIF Worm Opens Back Door

W32.Spybot-ZIF is a network-aware worm that opens a back door on the compromised computer.

11/2: Vig-C Virus Copies Itself

W32.Vig-C is a virus that copies itself to local drives as well as floppy disks.

11/2: Toob-A Trojan Lets Attacker In

Backdoor-Toob-A is a Trojan horse that opens a back door and allows an attacker to perform unauthorized actions on the compromised computer.

11/2: Trojan-Lodav-A Disables Software

Trojan-Lodav-A is a Trojan horse that disables security-related software.

11/2: BagleDL-AA a Windows Trojan

Troj/BagleDl-AA is a Trojan for the Windows platform.

11/2: BagleDL-Y Trojan Downloads Files

Troj/BagleDl-Y downloads files from a number of remote websites and executes them.

11/2: Backdoor-Ranky-V a Covert Trojan

Backdoor-Ranky-V is a Trojan horse that allows a compromised computer to be used as a covert proxy.

11/2: Lodear-B Trojan Downloads Files

Trojan-Lodear-B is a Trojan horse that attempts to download remote files.

11/2: Monikey Worm Sends Malicious Link

W32.Monikey@mm is a mass-mailing worm that sends an email containing potentially malicious link to email addresses gathered from the compromised computer and also spreads via file-sharing networks.

Barrage of Viruses Hits in October

A record number of malware hit the Internet last month, but none were killer viruses.