Malware: Archive: March 2006

3/31: Symbos-Flexspy-A a Mobile Symbian App

Symbos-Flexspy-A is a commercial Symbian application that needs user intervention to be installed on target devices.

3/31: Mitglied-AL Trojan Arrives as Attachment

Troj-Mitglied-AL is a Trojan that arrives on a system as attachment to spammed email messages.

3/31: Feebs-N Worm Spreads Via File Sharing

W32/Feebs-N is a worm for the Windows platform.

F-Secure Names Smartphone Spyware Trojan

Commercially available FlexiSPY is first app to let users secretly monitor calls and SMS messages on a smartphone, leading anti-virus firm to label it malicious code and take action.

3/31: Small-BOA Trojan Sends FBI Email

Troj-Small-BOA usually arrives as an attachment to spammed email messages.

3/31: JS-Flumita-B JavaScript in HTML File

JS-Flumita-B is JavaScript contained in an HTML file that redirects to a CGI Web page and exploits the Mismatched Document Object Model Objects Memory Corruption vulnerability.

3/31: BagleDL-BP Masked as Hacking Tool

Troj/BagleDl-BP is a Trojan for the Windows platform.

3/31: Rbot-BWT Worm, Trojan Exploits Flaws

W32/Rbot-BWT is a worm and IRC backdoor Trojan for the Windows platform.

3/31: IRCBot-GW a Backdoor Trojan

Troj/IRCBot-GW is a backdoor Trojan for the Windows platform.

3/31: Rontokbro-Z Worm Lowers Security

W32.Rontokbro-Z@mm is a mass-mailing worm that lowers security settings.

3/31: Tilebot-EH Worm Also a Backdoor

W32/Tilebot-EH is a worm and IRC backdoor for the Windows platform.

3/31: Feebs-P Worm Uses File Sharing

W32/Feebs-P is a worm for the Windows platform.

3/30: Looked-H Worm Spreads Via Shares

W32-Looked-H is a worm that spreads through network shares and attempts to infect .exe files.

3/30: Renver Trojan Steals Information

Trojan-Renver is a Trojan horse that steals confidential information.

3/30: Mytob-PE Worm Uses Own Engine

Worm-Mytob-PE is a memory-resident worm that propagates by sending email messages using its own Simple Mail Transfer Protocol (SMTP) engine or any available servers.

3/30: JS-Feebs-BD Embedded in JavaScript

JS-Feebs-BD is JavaScript that is embedded in a malicious Web site and is run on a system when a user visits the said Web site.

3/30: Skenkly-A Worm Opens Back Door

W32-Skenkly-A@mm is a worm that opens a back door and connects to an IRC server to listen for instructions that allow the remote attacker to perform various actions on the compromised computer.

3/30: Keylog-Typerecord a Keylogger

Keylog-Typerecord is not a virus or a Trojan; it is detected as an 'potentially unwanted program.'

3/30: Sdbot-BEI an IRC Backdoor Trojan

Troj/Sdbot-BEI is an IRC backdoor Trojan for the Windows platform.

3/30: Rbot-CWU Worm Runs in Background

W32/Rbot-CWU is a worm with backdoor functionality for the Windows platform.

3/30: NTRootkit-W a Device Driver Trojan

NTRootkit-W is a device driver that often uses the name m_hook.sys.

3/30: Bagle-EW a Trojan Downloader

W32/Bagle-ew is a Trojan downloader that attempts to download and execute files from various compromised websites.

3/30: Mytob-PB Worm Sends Email With Link

Worm-Mytob-PB is a memory-resident worm that propagates by sending email messages using its own Simple Mail Transfer Protocol (SMTP) engine.

Computer Safety For Small Businesses

A free online kit helps companies secure computer networks and data.

3/29: Detnat Virus Infects Executable Files

W32-Detnat is a virus that searches network shares and infects executable files.

3/29: Mular-A Worm Spreads Via File Sharing

W32.Mular-A is a worm that spreads using the eMule file-sharing program.

3/29: VB-ATA Worm Sends Malware Messages

W32/VB-ATA is a worm for the Windows platform.

3/29: PWSteal-Marlap-B Trojan Steals Info

PWSteal-Marlap-B is a Trojan horse that steals sensitive information and sends it to predetermined Web sites.

3/29: Loosky-CA Trojan Hides Processes

Troj/Loosky-CA is a DLL component helper Trojan for the Windows platform.

3/29: BankAsh-P Trojan Runs New Software

Troj/BankAsh-P is a Trojan for the Windows platform.

3/29: DNSBust-L Trojan Links to Server

Troj/DNSBust-L is a Trojan for the Windows platform.

3/29: RKDepo-A a Trojan Rootkit Downloader

Troj/RKDepo-A is a Trojan rootkit downloader for the Windows platform.

3/29: Mytob-HA a Mass-Mailing Worm, Trojan

W32/Mytob-HA is a mass-mailing worm and IRC backdoor Trojan for the Windows platform.

3/28: VBS-Welinf-A is Malicious Script

VBS-Welinf-A is a malicious, embedded Visual Basic Script found in files infected with W32-Welinf-A, a virus that infects .vbs, .htm, and .html files.

3/28: PWSteal-Marlap Shows Fake Message

PWSteal-Marlap is a Trojan horse that displays a fake AOL message and sends confidential information to the attacker.

3/28: Welinf-A Virus Infects Files

W32-Welinf-A is a virus that infects .vbs, .htm, and .html files with VBS-Welinf-A, a malicious, embedded Visual Basic Script. The threat also has back door capabilities.

3/28: Singu-AK a Windows Trojan

Troj/Singu-AK is a Trojan for the Windows platform.

3/28: Drsmartl-X Trojan Runs New Software

Troj/Drsmartl-X is a Trojan for the Windows platform.

3/28: Hearse-A Trojan Creates Two Files

Troj/Hearse-A is a Trojan for the Windows platform.

3/28: Backdoor-CIP a Remote Access Trojan

Backdoor-CIP is a remote access Trojan.

3/28: Drsmartl-S Trojan Downloads Code

For the second time in less than a month, security vendor Sophos has issued an alert for Troj/Drsmartl-S, a Trojan for the Windows platform.

3/28: Trojan-Textcash Executes CAB File

Trojan-Textcash is a Trojan horse that executes a CAB file in Internet Explorer cache folders by exploiting the Microsoft Internet Explorer CreateTextRange Remote Code Execution Vulnerability (BID 17196).

3/28: Backdoor-CYQ Trojan Drops Files

Backdoor-CYQ is a remote access Trojan.

3/28: Alcra-F Worm Spreads Via File Sharing

W32/Alcra-F is a worm for the windows platform.

3/28: Bancban-OJ Trojan Still in the Wild

For the second time in a week, security vendor Sophos has issued an alert for Troj/Bancban-OJ, a Trojan for the Windows platform.

3/27: Trojan-Stranget-B Steals Information

Trojan-Stranget-B is a Trojan horse that logs keystrokes, steals passwords and system information, and sends it to a remote attacker.

3/27: Gammiy Virus Infects Executable Files

W32-Gammiy is a virus that searches network shares and infects executable files.

3/27: Download-Fullalc Executes Remote File

Download-Fullalc is a Trojan horse that downloads and executes a remote file, which is a copy of the Trojan Keylogger-Stranget-B.

3/27: Minusia-A Worm Spreads Via Shares

Worm-Minusia-A propagates through network shares by dropping copies of itself in certain shares.

3/27: Brontok-Z a Mass-Mailing Worm

W32/Brontok-Z is a mass-mailing worm for the Windows platform.

Latest IE Exploit Creates Security Scramble

UPDATED: A new exploit could defeat Microsoft workarounds.

3/27: SpywareQuake a Potentially Unwanted App

SpwareQuake is not a virus or a Trojan but a 'potentially unwanted program.'

3/27: Htool-Dog a Command-Line Tool

Htool-Dog is a command-line tool for hackers.

3/27: PcClien-IJ Trojan Logs Keystrokes

Troj/PcClien-IJ is a Trojan for the Windows platform.

3/27: Bdoor-XD Trojan Installs Itself as Service

Troj/Bdoor-XD is a Trojan for the Windows platform.

3/27: Hilder-A a Mass-Mailing Worm

For at least the second time this month, security vendor Sophos has issued an alert for W32/Hilder-A, a mass-mailing worm for the Windows platform.

3/27: Agobot-TA Worm Runs in Background

W32/Agobot-TA is a worm with backdoor functionality for the Windows platform.

3/27: Puper-EY a Downloader Trojan

Troj/Puper-EY is a downloader Trojan for the Windows platform.

3/27: Rbot-CTJ Worm and Trojan Gives Access

W32/Rbot-CTJ is a worm and IRC backdoor Trojan for the Windows platform.

3/27: Dloader-CPD Trojan Arrives as Attachment

Troj-Dloader-CPD is a Trojan that usually arrives as an attachment to spammed email messages.

3/27: Rbot-CSC Worm Exploits Flaws

W32/Rbot-CSC is a worm for the Windows platform.

3/27: Rbot-CTJ Worm Gives Access

W32/Rbot-CTJ is a worm and IRC backdoor Trojan for the Windows platform.

3/27: Inject-H Trojan Spreads Via File Sharing

W32/Inject-H is a worm and IRC backdoor Trojan for the Windows platform.

3/27: Tilebot-EF Worm and Backdoor Trojan

W32/Tilebot-EF is a worm and IRC backdoor Trojan for the Windows platform.

3/24: PWSteal-Maplosty Steals Game Info

PWSteal-Maplosty is a Trojan horse that attempts to steal information related to the MapleStory online game, and send it to a predetermined email address.

3/24: Small-BNN Trojan Comes in Attachment

Troj-Small-BNN arrives on a system as a downloaded file from the Internet, a file installed by unsuspecting users, or as an attachment to an email message spammed by a malware or a malicious user.

Sun's Grid DDOS-Attacked

Sun's public grid launch was hampered by denial-of-service attacks on the company's grid pilot.

3/24: Bagle-HX Worm Has Rootkit Functions

Bagle-HX is a worm that has rootkit functionalities, which allow it to hide files, processes and Windows Registry entries.

3/24: MultiDropper-QJ Trojan Executes Files

MultiDropper-QJ is a multidropper Trojan that serves only to drop and execute other files on the target system.

3/24: DwnLdr-AKR a Windows Trojan

Troj/DwnLdr-AKR is a Trojan for the Windows platform.

3/24: Orse-R Trojan Accesses Internet

Troj/Orse-R is a Trojan for the Windows platform.

Warning on Malicious Bot Hitting Banks

Security firm claims 'Metafisher' has spread to a million computers and growing.

3/24: Cellery-B Worm Copies Itself to Drives

W32/Cellery-B is a network worm for the Windows platform that spreads by copying itself to certain shared network drives.

Microsoft Plans Patch For IE Hole

The company plans a patch for the 'highly critical' hole in the IE 7 beta.

Warning on Malicious Bot Hitting Banks

Security firm claims 'Metafisher' has spread to a million computers and growing.

3/23: Haxdoor-BH a Backdoor Trojan

Troj/Haxdoor-BH is a backdoor Trojan for the Windows platform.

3/23: Beagle-DZ Worm Spreads Via File Sharing

W32.Beagle-DZ is a worm that spreads through file-sharing networks.

3/23: Sdbot-BBA Worm Has Backdoor

For the second time in less than a month, antivirus vendor Sophos has issued an alert for W32/Sdbot-BBA, a worm with backdoor functionality for the Windows platform.

3/23: Kakkeys-C Trojan Releases Info

Trojan-Kakkeys-C is a Trojan horse that attempts to release sensitive information using bulletin boards and the Winny file-sharing network.

3/23: Symbos-Conwar-E a Symbian Malware

Symbos-Comwar-E is Symbian malware that propagates by sending copies of itself to other mobile devices via Bluetooth.

3/23: Rontokbr-A Worm Harvests Emails

W32/Rontokbr-A is a worm for the Windows platform.

3/23: Clagger-M Trojan May Arrive as Spam

Troj/Clagger-M is a Trojan for the Windows platform.

3/23: Swizzor-AW Trojan Downloads Adware

Troj/Swizzor-AW is a Trojan that downloads and installs advertising software.

3/23: Abwiz-F Trojan Has Rootkit Abilities

Trojan-Abwiz-F is a Trojan horse with rootkit abilities that downloads and executes remote files and sends confidential computer information to a remote attacker.

3/23: Goldun-K Trojan Steals Information

Trojan-Goldun-K is a Trojan horse program that steals passwords and account information and sends the information to a remote attacker.

3/23: Sdbot-BDV Worm and Backdoor Trojan

W32/Sdbot-BDV is a worm and IRC backdoor Trojan for the Windows platform.

3/23: Kakkeys-D Trojan uses File Sharing

Trojan-Kakkeys-D is a Trojan Horse that attempts to release sensitive information to predetermined bulletin boards via the Winny file-sharing network.

3/23: Multidr-FJ Trojan Creates New FIles

Troj/Multidr-FJ is a Trojan for the Windows platform.

Security Firm Caulks Sendmail Exploit

Sendmail plugs a hole that will a perpetrator take control of computers.

3/22: JS-Flumita-A is Malicious JavaScript

JS-Flumita-A is malicious JavaScript that spreads via spammed email messages.

3/22: Corpse-A a Proxy Trojan

Troj/Corpse-A is a proxy Trojan.

3/22: Rbot-I Worm Exploits Flaws

W32/Rbot-I is a worm for the Windows platform.

3/22: Adware-RBTeam an Adware Program

Adware-RBTeam is not a virus or a Trojan but an adware program that may have legitimate uses in contexts where an authorized administrator has knowingly installed this application.

Can IE Bug Do More Than Crash Browsers?

It's unclear whether the flaw could lead to drive-by attacks.

3/22: Hearse-A Trojan Drops Other Trojans

Troj-Hearse-A is a Trojan that drops TSPY_HEARSE.A and RTKT-HEARSE.A.

3/22: Tilebot-EE a Worm and IRC Trojan

W32/Tilebot-EE is a worm and IRC backdoor Trojan for the Windows platform.

3/21: Tilebot-EC Worm,Trojan Exploits Flaws

W32/Tilebot-EC is a worm and IRC backdoor Trojan for the Windows platform.

3/21: Renama-A Worm Responds to Emails

W32.Renama-A@mm is a mass-mailing worm that responds to emails in the user's Outlook inbox.

3/21: Clagger-L Trojan Arrives as Spam

Troj/Clagger-L is a Trojan for the Windows platform.

3/21: Bkdr-PPDoor-AS Backdoor Downloaded

Bkdr-PPDoor-AS is a memory-resident backdoor program that arrives on a system either as a dropped file of other malware, or as file downloaded from the Internet.

3/21: Goldsun-A a Windows Trojan

Troj/Goldsun-A is a Trojan for the Windows platform.

3/21: Zlob-L Trojan Executes Files

Trojan-Zlob-I is a Trojan horse that may download and execute remote files and redirect the Internet Explorer home page and search page.

3/21: Mytob-BK Worm Uses SMTP Engine

Worm_Mytob-BK propagates via email using its own SMTP (Simple Mail Transfer Protocol) engine.

3/21: Banker-CJA Trojan Obtains Online Data

Banker-CJA is a Trojan that obtains data from several online services.

3/21: Tilebot-EB Worm Runs Silently

W32/Tilebot-EB is a worm for the Windows platform.

3/21: Agent-ATM a Downloader Trojan

Troj/Agent-ATM is a downloader Trojan for the Windows platform.

Your Money or Your Data

AntiOnline Spotlight: What's worse than losing your data to malware? Paying a ransom to get it back.

Big Ads Add to Adware, Spyware

New report targets advertisers doing business with 180solutions.

ScanSafe Intros IM Security Management

Managing the rapidly growing security threats posed by instant messaging in businesses.

3/20: Downloader-ATM!CME-934 a Trojan

Downloader-ATM!CME-934 is a Trojan downloader known to have been spammed out widely.

3/20: PWSteal-Tarno-T Trojan Steals Info

PWSteal-Tarno-T is a Trojan horse that steals sensitive information such as user name and password details.

3/20: Exponny-A Trojan Drops Copy of Itself

Troj_Exponny-A is a Trojan that arrives on a system as a dropped file of other malware.

3/20: Small-BMS Trojan Arrives as Download

Troj_Small-BMS is a Trojan that arrives on a system either as a downloaded file from the Internet, a file installed by unsuspecting users, or as an attachment to an email message spammed by a malware or a malicious user.

3/20: Banload-VI a Windows Trojan

Troj/Banload-VI is a Trojan for the Windows platform.

3/20: Tilebot-EA a Worm and IRC Trojan

W32/Tilebot-EA is a worm and IRC backdoor Trojan for the Windows platform.

3/20: Steam-F a Password-Stealing Trojan

Troj/Steam-F is a password-stealing Trojan for the Windows platform.

3/20: Clagger-K Trojan Attached to Spam

Troj/Clagger-K is a Trojan for the Windows platform.

3/20: Clagger-D Trojan Connects to Website

Upon execution, Troj_Clagger-D connects to the Web site http://www.a{BLOCKED}i.com/ to download the file SUHOY112.EXE, which Trend Micro detects as TROJ_MULDROP.HC.

3/20: Rbot-CRG Worm Also an IRC Trojan

W32/Rbot-CRG is a worm and IRC backdoor Trojan for the Windows platform.

3/20: Zapchas-AU Trojan Runs Silently

Troj/Zapchas-AU is a Trojan for the Windows platform.

3/20: Kassbot-M Worm Has Backdoor

W32/Kassbot-M is a worm with backdoor functionality for the Windows platform.

3/17 SymbOS-Commwarrior-E Hits Phones

SymbOS-Commwarrior-E is a worm that runs on Series 60 phones.

3/17: Exponny Trojan Changes Winny Settings

Trojan-Exponny is a Trojan horse that changes the settings of the Winny file sharing software to expose all local fixed drives on the compromised computer.

3/17: ServU-CE Trojan a Hacked FTP Server

Troj/ServU-CE is a hacked version of a commercially available FTP server.

3/17: Xrove-A Worm Hits Desktops, Devices

W32/Xrove-A is a worm written for the .NET framework.

3/17: PWS-JK Trojan Runs Silently

PWS-JK is a Trojan that runs silently, no GUI interface or other message boxes appear.

3/17: Antiprod Macro Virus Lowers Security

W97M-Antiprod is a macro virus that lowers security settings.

3/17: Backdoor-Hesive-F Drops Another Trojan

Backdoor-Hesive-F is a Trojan horse that drops another Trojan, Backdoor-Hesive-E.

3/17: Elf-Kaiten-AK an Executable Linux File

Elf_-aiten-AK is an executable Linux file that is either dropped or downloaded by other malware.

3/17: Bancban-OJ a Windows Trojan

Troj/Bancban-OJ is a Trojan for the Windows platform.

3/17: Dloader-BXQ Trojan is Downloaded

Troj-Dloader-BXQ is a Trojan that arrives on a system either downloaded from the Internet and installed by unsuspecting users or via mass-mailed email messages.

3/17: Rbot-CQZ Worm, Trojan Runs Silently

W32/Rbot-CQZ is a worm and IRC backdoor Trojan for the Windows platform.

3/17: Dref-L a Mass-Mailing a Parasitic Virus

W32/Dref-L is a mass-mailing worm and parasitic virus with IRC backdoor functionality for the Windows platform.

3/17: Unix-Gets-A is Malicious Dropped Script

Unix-Gets-A is malicious script that arrives as a dropped file of ELF-LUPPER.H.

3/16: CXOver-A a Proof-of-Concept Trojan

Some security vendors have issued alerts for CXOver-A, a Trojan used as a proof-of-concept, in order to analyze the possibilities of developing malware that spreads between computers and PDA devices.

3/16: MSIL-Cxover-A Worm Affects Mobile Devices

MSIL-Cxover-A is a proof-of-concept worm written in Microsoft .NET's Microsoft Intermediate Language (MSIL) that can affect both Windows PC and Windows Mobile powered devices that have the .NET framework installed.

3/16: Elf_Lupper-H an Executable Linux File

Elf_Lupper-H is an executable Linux file (ELF) that arrives on a system as a dropped file of PERL_GETS.A.

3/16: Backdoor-CYP Trojan Runs Silently

Backdoor-CYP is a Trojan that when installed, runs silently, no GUI screen or other message boxes appear.

3/16: Perl_Gets-A is Malicious PERL Script

Perl_Gets-A is malicious PERL script that arrives as a dropped file of ELF_LUPPER.H.

3/16: IBank-E an Internet Banking Trojan

Troj/IBank-E is an internet banking Trojan for the Windows platform.

3/16: Dumaru-BZ Trojan Continues to Flourish

For the second time in less than a month, security vendor Sophos has issued an alert for Troj/Dumaru-BZ, a Trojan with password stealing capabilities.

3/16: Sality-I a Prepending Virus

W32/Sality-I is a prepending virus that also acts as a keylogger.

3/16: Drsmartl-S Trojan Downloads Code

Troj/Drsmartl-S is a Trojan for the Windows platform.

3/16: Drsmartl-R a Downloader Trojan

Troj/Drsmartl-R is a downloader Trojan that will download, install and run new software without notification that it is doing so.

3/16: PWS-KI Backdoor Trojan Gives Access

Troj/PWS-KI is a backdoor Trojan that allows a remote intruder to gain access and control over the computer.

New Trojan is Holding Data Ransom

Now it'll literally cost you to get your data back.

3/16: Rbot-CPD Worm and Backdoor Trojan

W32/Rbot-CPD is a worm and IRC backdoor Trojan for the Windows platform.

3/16: Rbot-CPM Hits PCs Already Infected

W32/Rbot-CPM is a worm and IRC backdoor Trojan for the Windows platform.

3/15: Elf-Mare-K a Malicious Executable Linux File

Elf-Mare-K is a malicious executable Linux file (ELF) that propagates by taking advantage of certain vulnerabilities.

3/15: Dloader-CHU Trojan Arrives as Attachment

Troj_Dloader-CHU is a Trojan that arrives as an attachment to spammed email messages.

3/15: Unix_Mare-L is Unix Malware

Unix_Mare-L is Unix malware that arrives as a file downloaded by another malware detected by Trend Micro as ELF_MARE.K.

3/15: Haxdoor-BC a Windows Trojan

Troj/Haxdoor-BC is a Trojan for the Windows platform.

3/15: Zapchas-AT Trojan Runs in Background

Troj/Zapchas-AT is a backdoor Trojan for the Windows platform.

3/15: Nafbot-A Worm Spreads Via File Sharing

W32/Nafbot-A is a worm for the Windows platform.

3/15: Zapchas-AS Trojan Gives Intruder Access

Troj/Zapchas-AS is a backdoor Trojan that allows a remote intruder to gain access and control over the computer.

3/15: Elf-Kaiten-AJ an Executable Linux File

Elf-Kaiten-AJ is malicious executable Linux file that arrives as a file downloaded by another malware, which Trend Micro detects as UNIX-MARE.L.

New Scam Focuses on U.S. Bank Customers

A new scam that focuses on Chase Manhattan customers shows a new level of malicious sophistication, say analysts.

Apple Patches Again

Second patch issued in fewer than two weeks labeled as "highly critical."

3/14: IRCBot-FP Trojan Disables AV Apps

Troj/IRCBot-FP is a backdoor Trojan for the Windows platform.

3/14: Bancos-RS a Windows Banking Trojan

Troj/Bancos-RS is a banking Trojan for the Windows platform.

3/14: Multidr-FG Trojan Runs Malicious Code

Troj/Multidr-FG is a Trojan that run further malicious code and a media file containing child pornography.

3/14: Rbot-CNZ a Worm and IRC Trojan

W32/Rbot-CNZ is a worm and IRC backdoor for the Windows platform.

3/14: Sdbot-BBA Worm Runs in Background

W32/Sdbot-BBA is a worm with backdoor functionality for the Windows platform.

3/13: Dloadr-NB Trojan Accesses Internet

Troj/Dloadr-NB is a Trojan for the Windows platform.

3/13: Bancban-OH an Internet Banking Trojan

Troj/Bancban-OH is an internet banking Trojan for the Windows platform.

3/13: CryZip Trojan Extorts Money For Files

Some security vendors have issued alerts for CryZip, a Trojan that searches for certain file types on an infected machine, compresses these files and password protects the archive.

3/13: Sdbot-BAY Worm, Trojan Exploits Flaws

W32/Sdbot-BAY is a worm and IRC backdoor Trojan for the Windows platform.

3/13: Hilder-A a Mass-Mailing Worm

W32/Hilder-A is a mass-mailing worm for the Windows platform.

3/13: ZippoCryptor Trojan Encrypts Files

ZippoCryptor is a Trojan that encrypts all the files with certain extensions.

3/13: Sickbt-D Trojan Downloads Malicious Code

Troj/Sickbt-D is a Trojan for the Windows platform that attempts to download further malicious code.

3/13: Zapchas-AR a Backdoor Trojan

Troj/Zapchas-AR is a backdoor Trojan for the Windows platform.

3/13: Zapchas-AQ a Backdoor Trojan

Troj/Zapchas-AQ is a backdoor Trojan for the Windows platform.

Microsoft Plans Office, Windows Patches

UPDATED: Critical Office flaw and 'important' Windows issue targeted for upcoming Microsoft patch release.

3/10: Haxdoor-H Trojan Opens Back Door

Backdoor-Haxdoor-H is a Trojan horse program that opens a back door on the compromised computer and allows a remote attacker to have unauthorized access.

3/10: USKAF-A a Windows Worm

W32/USKAF-A is a worm for the Windows platform.

3/10: Lasher-A Trojan Hooks System Libraries

Troj/Lasher-A is a Trojan for the Windows platform.

3/10: Davs Virus Infects Executable Files

W32.Davs is a virus that searches all drives and network shares on the compromised computer and infects executable files.

3/10: Muldrop-GP Trojan in Attachment

Troj-Muldrop-GP is a Trojan that arrives attached to an email message, which is manually spammed by a malicious user.

3/10: Atomicks-A Worm Searches Root Folder

Worm-Atomicks-A searches for files in the root folder of an affected system's hard and floppy drive, which is usually C: and A:, respectively.

Firewalls Morph into New Enterprise Role

The death of the firewall has been greatly exaggerated, according to analysts. But it's not your father's firewall, either. The security technology is morphing into a whole new role in the enterprise.

3/9: Bkdr_Dumador-BW in Downloaded File

Bkdr_Dumador-BW is a backdoor that arrives as a file downloaded from the Internet by another malware.

3/9: PeepVie-W a Backdoor Trojan

Troj/PeepVie-W is a backdoor Trojan for the Windows platform.

3/9: SymbOS-Commwarrior-D Runs on Phones

SymbOS-Commwarrior-D is a worm that runs on Series 60 phones.

3/9: Banload-TI Trojan Silently Runs Software

Troj/Banload-TI is a Trojan for the Windows platform.

3/9: BrontDL-B a Downloading Trojan

Troj/BrontDl-B is a downloading Trojan for the Windows platform.

3/9: Spy-Agent-AP a Data-Stealing Trojan

Spy-Agent-AP is a data-stealing Trojan intended to steal information typed into the browser on the victim machine.

3/9: VB-ACS Worm Spreads Via Peer-to-Peer

W32/VB-ACS is a worm for the Windows platform.

3/9: IRCBot-FD Worm Also an IRC Trojan

W32/IRCBot-FD is a worm and IRC backdoor for the Windows platform.

3/9: Saros-C Worm Kills Security Tools

Saros-C is a worm that ends processes belonging to several security tools, such as antivirus programs and firewalls, among others.

3/9: Rbot-CMY a Worm and Backdoor Trojan

W32/Rbot-CMY is a worm and IRC backdoor Trojan for the Windows platform.

3/9: Tilebot-DU a Worm, Trojan Hits Windows

W32/Tilebot-DU is a worm and IRC backdoor Trojan for the Windows platform.

3/8: JS/Icabdi Virus Searches for .XSN Files

JS/Icabdi is a virus that when run, searches for files with the .xsn extension to infect. XSN files are MS Office Infopath files.

3/8: MultiDropper-QE a Trojan GIF Picture File

MultiDropper-QE is a Trojan GIF picture file with embedded VBScript code and it holds an converted 32 bit PE image inside.

3/8: Hotmaton Worm Spreads Via Hotmail

Some security vendors have issued alerts for W32/Hotmaton.worm, a worm written in VB.

3/8: Dumaru-BZ Trojan Steals Passwords

Troj/Dumaru-BZ is a Trojan with password-stealing capabilities.

3/8: BagleD1-BN a Trojan Downloader

Troj/BagleDl-BN is a Trojan downloader for the Windows platform.

3/8: ComWar-M Worm Affects Cell Phones

ComWar-M is a worm that only affects cellular phones using the operating system Symbian 60 series.

3/8: Runner-F a Windows Trojan

Troj/Runner-F is a Trojan for the Windows platform.

3/8: PWS-WoW-DR a Trojan Dropper File

PWS-WoW-DR is a Trojan dropper file.

3/8: Maniccum Worm Opens Back Door

W32/Maniccum is a worm that opens a back door on the compromised computer and spreads via AOL and MSN instant messenger.

3/8: Backdoor-Hesive-C Trojan Gives Access

Backdoor-Hesive-C is a Trojan horse that opens a back door on the compromised computer and allows a remote attacker unauthorized access.

Feds Continue Spam Porno Crackdown

New Hampshire woman faces up to 15 years in jail following guilty plea.

3/8: Unix/BootRooter a Unix Shell Script Trojan

Unix/BootRooter is a Unix type Shell script Trojan.

3/8: Ranck-DX Trojan Runs in Background

Troj/Ranck-DX runs continuously in the background listening on a randomly generated port and allows HTTP traffic to be relayed through the computer.

3/7: Dloader-CBC Trojan has 'Medium' Rating

The Dloader-CBC Trojan attacks the Windows platform.

3/7: Hilder-A Worm Kills Anti-Virus Apps

The Hilder-A worm shuts off anti-virus applications running on the infected computer.

3/7: Elf-Mare-J a Linux Executable File

The Elf-Mare-J is a Linux executable file that has been rated as having 'high' damaging and distribution potential.

3/7: Unix-Mare-I Born from Elf-Mare-J

The Unix-Mare-I malware is downloaded by the Linux executable Elf-Mare-J.

3/7: Bancban-OF Trojan Steals Info

The Bancban-OF Trojan is spyware that steals information off the infected computer.

3/7: Rbot-CIY Worm Spreads Via Network Shares

The Rbot-CIY worm grants access to remote, unauthorized users.

Malware Attacks Drop Off in February

After a record-breaking January, malware attacks dropped 26 percent last month. But the rate of attacks still was 39 percent higher than it was a year before.

Apple Patches Zero-Day Flaw

Better late than never, Apple addresses a week-old issue and 19 others hanging around.