Malware: Archive: May 2006

5/31: Dloader.A Trojan Arrives as File Download

Troj_Dloader.A is a Trojan that arrives as a file downloaded from the Internet by an unsuspecting user when visiting malicious Web sites.

5/31: JS_Feebs.AZ is Malicious JavaScript

JS_Feebs.AZ is malicious JavaScript that is embedded in a malicious Web site and is run on a system when a user visits the said Web site.

5/31: Mesoto-C Trojan Steals User Information

Troj/Mesoto-C is a Trojan for the Windows platform.

5/31: QQHelp-P an Advertising Software Trojan

Troj/QQHelp-P is a downloader/updater Trojan for advertising software.

5/31: Melo Worm Sends Itself to Messenger Contacts

W32/Melo.worm.gen attempts to spread by sending itself to MSN Messenger contacts and via floppy diskettes.

5/31: XML_Dustar.A a Proof-of-Concept Virus

XML_Dustar.A is Trend Micro's detection for a proof-of-concept macro virus that affects StarOffice/OpenOffice Suites.

5/31: Trojan.Emcodec.C Drops, Executes Other Trojan

Trojan.Emcodec.C is a Trojan horse that drops and executes a copy of a member of the Trojan.Zlob family.

5/31: Bancos-AJS an Internet Banking Trojan

Troj/Bancos-AJS is an Internet Banking Trojan for the Windows platform.

5/31: Agent-BTP Trojan Targets Windows

Troj/Agent-BTP is a Trojan for the Windows platform.

5/31: Zlob-QJ Trojan Downloads, Installs FIles

Troj/Zlob-QJ is a Trojan for the Windows platform.

5/31: Wamgin Virus Infects .Exe Network Files

W32.Wamgin is a virus that infects .exe files on network drives. It also downloads and executes remote files.

5/31: Naras a Parasitic File Infector Written in Visual C++

W32/Naras is a parasitic file infector written using Microsoft Visual C++.

5/31: Lecna.A Worm Exploits Flaws

W32.Lecna.A is a worm that spreads through network shares by exploiting vulnerabilities.

Symantec Patches Antivirus Vulnerability

Firm closes potential backdoor to malicious hackers.

5/31: MyftU.dr Trojan Has Many Variants

MyftU.dr is a Trojan with many variants, so the names of the files dropped onto the victim's may vary.

5/31: PWS-Cuti Trojan Dropped by Other Trojan

PWS-Cuti is a Trojan dropped by MyftU.dr Trojan.

5/30: Pahatia.A Worm Copies Itself to Folders

W32.Pahatia.A is a worm that can spread by copying itself into local folders and mapped network drives, and attempts to restart the compromised computer if certain processes are running.

5/30: Trojan.Gobrena Downloads, Executes Other Trojan

Trojan.Gobrena is a Trojan horse that downloads and executes Trojan.Goldun, a Trojan horse program that steals user's authentication for e-gold.

5/30: JS_Feeb.BX is Malicious Javascript

JS_Feebs.BK is malicious JavaScript that is usually embedded in a malicious Web site and is run on a system when a user visits the said Web site.

5/30: Dropper.ZC Trojan Arrives as Attachment

Troj_Dropper.ZC is a Trojan that may arrive on a system as an attachment to spammed email messages.

5/30: Small.ABO Trojan Arrives as Download

Troj_Small.ABO may arrive on a system as a downloaded file from the Internet or as a dropped file of another malware.

5/30: Mitglieder.IZ Trojan Downloads Worm

Mitglieder.IZ is a Trojan that downloads the worm detected as Bagle.JG from several websites.

5/30: Paymite-B a Start Page Trojan

Troj/Paymite-B is a Start Page Trojan.

5/30: Sdbot-HB Worm Spreads to Remote Shares

W32/Sdbot-HB is a worm that attempts to spread to remote network shares.

5/30: Feebs-AA Worm Continues to Spread

W32/Feebs-AA, a worm for the Windows platform, continues to spread, according to security vendor Sophos, which issued the second alert for the worm this month.

5/30: Zasran-D Worm Runs in Background

W32/Zasran-D is a mass mailing worm with backdoor functionality for the Windows platform.

5/30: PWS-WinPatch Trojan Claims to be Patch

PWS-WinPatch is a trojan written in Borland Delphi that arrives in an email claiming to be a Microsoft patch for the Winlogon service.

5/30: Beast/PWS-C Trojan Displays Bogus Message

Troj/BeastPWS-C is a keylogging Trojan for the Windows platform.

5/30: Backdoor.Sdbot.AT Trojan Opens Back Door

Backdoor.Sdbot.AT is a Trojan horse that opens a back door and downloads remote files onto the compromised computer.

5/30: Floppy-F a Floppy Drive Worm

W32/Floppy-F is a floppy drive worm that may attempt to copy itself to A:New document.exe.

5/30: Backdoor-CZX Trojan Drops, Executes Files

BackDoor-CZX is a Trojan that upon execution drops files.

Security Firm Warns on Symantec Flaw

Security researcher eEye Digital reports Symantec software opens corporate computers to hackers.

Microsoft Tells Word Users to Play it 'Safe'

Updated advisory instructs users how to avoid Trojan attack.

5/30: Backdoor.Sdbot.AT Trojan Gives Attacker Access

Backdoor.Sdbot.AT is a Trojan horse that opens an IRC back door, which allows a remote attacker to control the compromised computer.

5/30: Bagle.JG Worm Drops Trojan, Disables Services

Bagle.JG is a worm that drops the Trojan detected as Mitglieder.IZ in the affected computer.

5/30: Banwar-A a Mass-Mailing Worm and Trojan

W32/Banwar-A is a mass mailing worm and backdoor Trojan for the Windows platform.

5/26: Jesse Worm Spreads Via MSN Messenger

W32.Jesse is a worm that propagates via MSN Messenger.

5/26: Banker-BLZ Trojan Targets Windows

Troj/Banker-BLZ is a Trojan for the Windows platform.

5/26: Trojan.Agentdoc.B Downloads, Executes Files

Trojan.Agentdoc.B is a Trojan horse that downloads and executes remote files on the compromised computer.

5/26: Melo-C a Windows Worm

W32/Melo-C is a worm for the Windows platform.

5/30: Looked.I Worm Spreads Via Network Shares

W32.Looked.I is a worm that spreads through network shares and attempts to infect .exe files.

5/26: Rbot-DVC Worm Also an IRC Trojan

W32/Rbot-DVC is a worm and IRC backdoor Trojan for the Windows platform.

5/26: Tilebot-FA Worm Has Backdoor Functions

W32/Tilebot-FA is a worm with backdoor functionality for the Windows platform.

5/26: Zapchas-KV Trojan Runs in Background

Troj/Zapchas-KV is a Trojan for the Windows platform.

5/25: SymbOS.Commwarrior.I Worm Runs on Cell Phones

SymbOS.Commwarrior.I is a worm that runs on Series 60 phones.

5/25: SymbOS.RommWar.D Trojan Installs File

SymbOS.RommWar.D is a Trojan horse that affects the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones.

5/25: SymbOS.RommWar.B Trojan Installs File

SymbOS.RommWar.B is a Trojan horse that affects the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones.

5/25: Backdoor.Darkmoon.C Trojan Opens Back Door

Backdoor.Darkmoon.C is a Trojan horse that opens a back door and attempts to download remote files.

5/25: Lunedo.B Macro Virus Infects Word Documents

W97M.Lunedo.B is a macro virus that infects Microsoft Word documents.

5/25: Banwarum Worm Uses Own SMTP Engine

W32.Banwarum@mm is a mass-mailing worm that uses its own SMTP engine to send an email to addresses that it gathers from the compromised computer.

5/25: Banker-BLM an Internet Banking Trojan

Troj/Banker-BLM is an internet banking Trojan for the Windows platform.

5/25: Zasran-B Worm Downloads Configuration Data

W32/Zasran-B is a worm for the Windows platform.

5/25: Sality-U a Parasitic Windows Virus

W32/Sality-U is a parasitic virus for the Windows platform.

5/25: SymbOS.Doomboot.T Trojan Drops Corrupt Files

SymbOS.Doomboot.T is a Trojan horse that drops corrupt files and a copy of SymbOS.Commwarrior.I on to the compromised device.

5/25: SymbOS.RommWar.C Trojan Installs File

SymbOS.RommWar.C is a Trojan horse that affects the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones.

5/25: Worm_Ranchneg.A Attaches Itself to Emails

Security vendor Trend Micro is reporting news of Worm_Ranchneg.A spreading in the wild.

5/25: Zasran-C Worm Sends Emails in German

W32/Zasran-C is a worm for the Windows platform that spreads via email.

Poking Holes in Public HotSpots

While you're surfing at a trade show, is someone else poking around that network from outside of the conference hall?

5/25: Clagger-S Trojan Drops More Malicious Code

Troj/Clagger-S is a Trojan that downloads further malicious code.

5/24: Trojan.Hoosmi Uses Rootkit Techniques

Trojan.Hoosmi is a Trojan horse that uses rootkit techniques and downloads files from a remote location.

5/24: Tibs.AI Trojan Arrives as Dropped File

Troj_Tibs.AI arrives on a system as a file dropped by CHM_CODEBASE.BS, or downloaded by TROJ_ANIMOO.D.

5/24: Animoo.D Trojan Exploits Flaw

Troj_Animoo.D usually arrives as a downloaded file from the Internet whenever users visit the malicious Web site http://traffall.biz/{BLOCKED/064/sploit.anr.

5/24: Downloader-AWI Pulls Files From Website

Downloader-AWI detection is for a file that serves as a downloading/ updating component.

5/24: SymbOS.Cardtrp.AD Trojan Disables Apps

SymbOS.Cardtrp.AD is a Trojan horse that runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones.

5/24: CHM_Codebase.BS a Compiled HTML File

CHM_Codebase.BS is a Compiled HTML (.CHM) file that is usually downloaded into a system from a certain malicious Web site via a Windows exploit.

5/24: Mytob-HW Worm Targets Windows

W32/Mytob-HW is a worm for the Windows platform.

5/24: Zasran-A Worm Downloads Configuration Data

W32/Zasran-A is a worm for the Windows platform.

5/24: Bobandy-A a Mass-Mailing Worm

W32/Bobandy-A is a mass-mailing worm for the Windows platform.

5/24: Delf-CFX Trojan Copies Itself

Troj/Delf-CFX is a Trojan for the Windows platform.

5/24: Traxg-E Worm Spreads Via Network Shares

W32/Traxg-E is a mass-mailing worm that also spreads by copying itself to network shares.

5/24: Dloadr-HAA Trojan Communicates With Server

Troj/Dloadr-HAA is a Trojan for the Windows platform.

5/24: Mytob-HX Worm Harvest Email Addresses

W32/Mytob-HX is a worm for the Windows platform that harvests email addresses from files on the infected computer and sends itself as an attachment to each address found.

5/24: Banloa-ACM a Backdoor Trojan

Troj/Banloa-ACM is a backdoor Trojan that allows a remote intruder to gain access and control over the computer.

5/24: Backdoor.Haxdoor.K Trojan Steals Information

Backdoor.Haxdoor.K is a Trojan horse that opens a back door on the compromised computer.

5/24: Browsafe.A Trojan Arrives as Downloaded File

Troj_Browsafe.A arrives as a file downloaded by an unsuspecting user when visiting a certain Web site.

5/24: Mytob.QA Worm Opens Back Door

W32.Mytob.QA@mm is a mass-mailing worm that opens a back door on the compromised computer.

5/24: Rasdoor-D a Backdoor Trojan

Troj/Rasdoor-D is a backdoor Trojan for the Windows platform.

5/24: Kassbot-P Worm and Trojan Continues to Spread

W32/Kassbot-P is a worm and IRC backdoor Trojan for the Windows platform.

5/24: FeebDL-G HTML File Acts as Trojan

Troj/FeebDl-G is an HTML file that acts as a downloader Trojan for the Windows Platform.

5/24: Haxdoor-AS Trojan Steals Data

Troj/Haxdoor-AS is a Trojan for the Windows platform.

5/23: Mytob.PP Worm Gathers Email Addresses

W32.Mytob.PP@mm is a mass-mailing worm that gathers email addresses from the compromised computer.

5/23: MayArchive Trojan Scans Hard Drive

MayArchive is a Trojan that scans the hard drive of an infected machine for certain file types, copies these files to its own encrypted archive and deletes the original files.

5/23; Gusi.A Backdoor Inserts Itself into IE Processes

Gusi.A is a backdoor that injects itself into the Internet Explorer process.

5/23: Trojan.Voxom Monitors Network Activity

Trojan.Voxom is a Trojan horse that monitors network activity and may attempt to connect to a remote Web site.

5/23: Rbot-DRD Worm Also an IRC Trojan

W32/Rbot-DRD is a worm and IRC backdoor Trojan for the Windows platform.

5/23: Sality-U a Parasitic Virus

W32/Sality-U is a parasitic virus for the Windows platform.

5/23: Mytob-HW Worm Targets Windows

W32/Mytob-HW is a worm for the Windows platform.

5/23; Opnic-C Trojan Targets Windows

Troj/Opnis-C is a Trojan for the Windows platform.

5/23: Worm_Mytob.HH Arrives as Attachment

Worm_Mytob.HH arrives on a system as an attachment to a spammed email message.

Thieves Bag Data on 26.5M Vets

VA launches efforts to inform veterans while FBI begins probe.

Word Attack Hails From China

Security researchers warn Microsoft Word zero-day exploit is aimed at government e-mail systems.

5/22: Browsesafe Worm Links to Yahoo IM, MIRC

W32.Browsesafe is a worm that sends a link to a copy of itself via Yahoo Instant Messenger and MIRC.

5/22: Download.Swif a Macromedia Flash-Based Trojan

Download.Swif is a Macromedia Flash-based Trojan horse that downloads and executes a file.

5/22: Wlook-A an Information-Stealing Trojan

Troj/Wlook-A is an information-stealing Trojan for the Windows platform.

5/22: SymbOS.Doomboot.U Trojan Drops Corrupted Files

SymbOS.Doomboot.U is a Trojan horse that drops corrupted files on to the compromised device. It also attempts to drop another Trojan Horse onto a removable drive.

5/22: Tometa-E Trojan Targets Windows

Troj/Tometa-E is a Trojan for the Windows platform.

5/22: Worm_Scano.AB Attaches Itself to Emails

Worm_Scano.AB is one of TROJ_DELF.WH's downloaded files.

5/22: Brontok-Z a Mass-Mailing Worm

W32/Brontok-Z is a mass-mailing worm for the Windows platform.

5/22: Stinx-V an IRC Backdoor Trojan

Troj/Stinx-V is an IRC backdoor Trojan for the Windows platform.

5/22; BankDL-AZ a Downloader Trojan

Troj/BankDl-AZ is a downloader Trojan for the Windows platform.

5/22: Bagle-JE Worm Communicates With Server

W32/Bagle-JE is a mass-mailing worm for the windows platform.

5/22: Naras Virus Infects Executable Files

W32.Naras is a virus that infects executable files, logs keystrokes, and contains rootkit functionality.

5/22: Download.Swif a Macromedia-Based Trojan

Download.Swif is a Macromedia Flash-based Trojan horse that downloads and executes a file.

5/22: Bkdr_Breplibot Backdoor Program is Attached

Bkdr_Breplibot is a backdoor program that arrives on a system as an attachment to a spammed email message.

5/22: Mytob.PX Worm May Lower Security Settings

W32.Mytob.PX@mm is a mass-mailing worm that may open a back door and lower security settings on the compromised computer.

5/22: Bkdr_Prost.AA a Backdoor Application

Bkdr_Prost.AA is a backdoor application that arrives on a system either as a downloaded file from the Internet or as an attachment to an email message manually mass-mailed by a malicious user.

5/22: Mytob-HV Worm and Trojan Listens for Commands

W32/Mytob-HV is a worm and IRC backdoor Trojan for the Windows platform.

5/22: Troj_Delf.WH a Memory-Resident Trojan

Troj_Delf.WH is a memory-resident Trojan may be downloaded from the Internet by unsuspecting users.

5/22: Browaf Worm Link to Yahoo IM, MIRC

W32.Browaf is a worm that sends a link to a copy of itself via Yahoo Instant Messenger and MIRC.

5/19: SymbOS.RommWar.A Trojan Installs Corrupt App

SymbOS.RommWar.A is a Trojan horse that affects the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones.

5/19: Symbos_Skulls.Z Malware Arrives as Install

Symbos_Skulls.Z is Symbian malware that affects mobile phones running on Series 60 Symbian operating systems.

5/19: Symbos_Skulls.Y Malware Opens FIle

Symbos_Skulls.Y is Symbian malware that opens the file PopUp0.txt.

5/19: SymbOS.Doomboot.T Trojan Installs Corrupt Files

SymbOS.Doomboot.T is a Trojan horse that installs corrupt files on the compromised device preventing it from restarting correctly.

5/19: Worm_Antinny.BJ Spreads Via Shared Folders

Worm_Antinny.BJ propagates via the shared folders of the Winny peer-to-peer application and via File Sharing programs that use the file, Share.exe.

5/19: Clickbot.A Trojan Registers as BHO

Clickbot.A is a Trojan that obtains financial profit from fraudulent clicks on advertisements sponsored by a certain company, which in return does not get any visits to its website.

5/19: Bancban-OT an Internet Banking Trojan

Troj/Bancban-OT is an internet banking Trojan for the Windows platform.

5/19: Clicker-CO Trojan Continues to Spread

For the second time this month, security vendor Sophos has issued an alert for Troj/Clicker-CO, a Trojan for the Windows platform.

5/19: Worm_Mydoom.BT Arrives as Random File

Worm_Mydoom.BT arrives as a randomly named file downloaded from the Internet by a malware detected by Trend Micro as TROJ_DLOADER.IE.

5/19: Dbit-B Virus and Trojan Infects .EXE Files

W32/Dbit-B is a virus and backdoor Trojan for the Windows platform.

5/19: Backdoor.Ginwui Trojan Opens Back Door

Backdoor.Ginwui is a Trojan horse that opens a back door on the compromised computer.

5/19: Trojan.Mdropper.H Exploits Word Flaw

Trojan.Mdropper.H is a Trojan horse that drops a file on the compromised computer.

5/19: Feebs-IA Worm Spreads Via File Sharing

W32/Feebs-IA is a worm for the Windows platform.

5/19: Tibs-AR Trojan Communicates With Server

Troj/Tibs-AR is a Trojan for the Windows platform.

5/19: Khoobe-B Trojan Targets Windows

Troj/Khoobe-B is a Trojan for the Windows platform.

5/19: Kassbot-Q a Worm and IRC Backdoor Trojan

W32/Kassbot-Q is a worm and IRC backdoor Trojan for the Windows platform.

5/19: Trojan.Nebular Sends Attacker Information

Trojan.Nebular is a Trojan horse that sends system information to a remote attacker and may attempt to download and execute remote files on the compromised computer.

5/19: Infostealer.Wabber Trojan Steals Information

Infostealer.Wabber is a Trojan horse that steals confidential information from the compromised computer, including the contents of the Windows Address Book.

5/19: Zlob-KC Trojan Pretends to be Application

Troj/Zlob-KC is a downloading Trojan for the Windows platform.

5/18: SymbOS.Commdropper.B Trojan Hits OS

SymbOS.Commwarrior.H is a worm that runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones.

5/18: SymbOS.Commwarrior.F Worm Hits Series 60 Phones

SymbOS.Commwarrior.F is a worm that runs on Series 60 phones.

5/18: SymbOS.Commwarrior.G a Cell Phone Worm

SymbOS.Commwarrior.G is a worm that runs on Series 60 phones.

5/18: SymbOS.Commwarrior.H Worm Runs on Symbian OS

SymbOS.Commwarrior.H is a worm that runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones.

5/18: Agent-BMV a Trojan Installer

Troj/Agent-BMV is a Trojan installer for the Windows platform.

5/18: Pokerfake.A Trojan May Be Downloaded

Troj_Pokerfake.A may arrive on a system as a downloaded file from a legitimate Web site.

5/18: Mdrop-AMA a Multidropper Trojan

Troj/Mdrop-AMA is a multidropper Trojan for the Windows platform.

5/18: Drsmartl-S Trojan Downloads Further Code

Troj/Drsmartl-S is a Trojan for the Windows platform.

5/18: Zlob-JU Trojan Targets Windows

Troj/Zlob-JU is a Trojan for the Windows platform.

5/18: Downloader-XT Trojan Has Two Components

Downloader-XT is a downloader Trojan consisting of a server component and a server editor component.

5/18: Yabe.G Trojan Arrives as Attachment

Troj_Yabe.G usually arrives on a system as an attachment to spammed email messages.

5/18: Dongbot Backdoor Performs Multiple Functions

W32/Dongbot is an IRC controlled backdoor, which consists of a bot component and a bot editor component.

5/18: Trojan.Tabela.G Steals Email Addresses

Trojan.Tabela.G is a Trojan horse program that steals email addresses from the compromised computer and sends stolen information to a remote attacker.

5/18: BackDoor-CKF Gives Attacker System Access

BackDoor-CKF is an IRC controlled backdoor, which consists of a bot component and a bot editor component.

5/17: Hilder Worm Drops, Runs VBScript

W32/Hilder.worm is an email worm that drops and run a VBScript, in order to send copies of itself to all entries in the address book using Microsoft Outlook.

5/17: Erazor Worm Spreads Via Kazaa File Sharing

W32/Erazor.worm is a worm that propagates via the Kazaa peer-to-peer file sharing application.

5/17: Cimuz-AI Trojan Communicates With Server

Troj/Cimuz-AI is a Trojan for the Windows platform.

5/17: Kidala-B a Mass-Mailing Worm and Trojan

W32/Kidala-B is a mass-mailing worm and IRC backdoor Trojan for the Windows platform.

5/17: Brontok-AQ a Mass-Mailing Worm

W32/Brontok-AQ is a mass-mailing worm for the Windows platform.

5/17: Symbos.Bootoon.F Trojan Installs Component

SymbOS.Bootton.F is a Trojan horse that installs a component into the compromised device.

5/17: Yabe.G Trojan Arrives as Attachment

Troj_Yabe.G usually arrives on a system as an attachment to spammed email messages. Users should therefore refrain from opening email messages that come from untrusted sources.

5/17: Bagle-JJ an Email Worm

W32/Bagle-JJ is an email worm for the Windows platform.

5/17: SymbOS.Mabtal.B Trojan Installs Other Trojan

SymbOS.Mabtal.B is a Trojan horse that runs on the Symbian OS, which is used as the operating system for Nokia Series 60 cellular telephones.

5/17: Tilebot-ES Worm and Trojan Spreads Multiple Ways

W32/Tilebot-ES is a worm and IRC backdoor Trojan for the Windows platform.

An Eye on Wi-Fi Security

Here's your chance what Wi-Fi eavesdroppers see — and it isn't pretty.

5/17: Tilebot-ET Worm and Trojan Runs in Background

W32/Tilebot-ET is a worm and IRC backdoor Trojan for the Windows platform.

5/16: Trojan.Exponny.B Changes File Settings

Trojan.Exponny.B is a Trojan horse that changes settings in the Winny file-sharing application to share local files on the compromised computer.

5/16: Backdoor.Dumbot Trojan Opens Back Door

Backdoor.Dumbot is a Trojan horse that opens a back door on the compromised computer and receives IRC commands.

5/16: KittyKat.A Virus Inserts Code in Files

KittyKat.A is a virus with no destructive effects.

5/16: Zlob-JR Trojan Targets Windows

Troj/Zlob-JR is a downloader Trojan for the Windows platform.

5/16: Banloa-ACM Trojan Gives Intruder Access

Troj/Banloa-ACM is a backdoor Trojan that allows a remote intruder to gain access and control over the computer.

5/16: Worm_Areses.AC Uses Own SMTP Engine

Trend Micro has received several infection reports of Worm_Areses.AC, initially from USA, of this worm spreading in the wild.

5/16: Misuc-C Trojan Messages Remote Locations

Troj/Mlsuc-C is a backdoor Trojan for the Windows platform.

5/16: WowPWS-H a Password-Stealing Trojan

Troj/WowPWS-H is a password stealing Trojan for the Windows platform.

Check Point Offers a United Front Against Threats

The security vendor introduces a one-device approach to both Internet connectivity and security with the Safe@Office 500 and 500W (the W stands for wireless).

5/16: Trojan.Checkraise Steals Poker Site Passwords

Trojan.Checkraise is a Trojan horse that steals passwords for popular online poker Web sites.

5/16: Clicker-CM a Windows Trojan

Troj/Clicker-CM is a Trojan for the Windows platform.

5/15: Areses.H a Mass-Mailing Worm

W32.Areses.H@mm is a mass-mailing worm that opens a back door on the compromised computer and may download files.

5/15: Infostealer.Kurofoo.B Trojan Collects Information

Infostealer.Kurofoo.B is a Trojan horse that collects email configuration and sensitive information, and makes it available through the Winny file-sharing network.

5/15: Dloadr-W Trojan Runs File Via FTP

Troj/Dloadr-W is a Trojan for the Windows platform.

5/15: Dwnldr-BVS a Windows Downloader Trojan

Troj/Dwnldr-BVS is a downloader Trojan for the Windows platform.

5/15: Clicker-CM Trojan Targets Windows

Troj/Clicker-CM is a Trojan for the Windows platform.

5/15: Eserloes Macro Virus Infects Word Template

W97M.Eseloes is a macro virus that infects the Microsoft Word template (normal.dot file) and any open Word documents.

5/15: Kassbot-P Worm Also an IRC Trojan

W32/Kassbot-P is a worm and IRC backdoor Trojan for the Windows platform.

5/15: Agent-BMT a Windows Trojan

Troj/Agent-BMT is a Trojan for the Windows platform.

5/15: Detnat.D Virus Searches Network Shares

W32.Detnat.D is a virus that searches network shares and infects executable files.

5/15: Downloader-AWE Trojan Resets IE Page

Downloader-AWE Trojan does not download from a static Universal Resource Location (URL).

5/15: Backdoor.Eterok Back Door Drops Files

Backdoor.Eterok is a back door that drops files and opens a back door on the compromised computer.

5/15: JS_Feebs-KD is Malicious JavaScript

JS_Feebs-KD is JavaScript that is embedded in a malicious Web site and is run on a system when a user visits the said Web site.

5/15: Virut.A Virus Infects Executable Files

W32.Virut.A is a virus that infects executable files and opens a back door on TCP port 65520 by connecting to a predefined IRC server.

5/12: Tibs-AK Trojan Communicates With Server

Troj/Tibs-AK is a Trojan for the Windows platform.

5/12: Banker-BIP a Windows Trojan

Troj/Banker-BIP is a Trojan for the Windows platform.

5/12: VB-API Trojan Modifies IE Settings

Troj/VB-API is a Trojan for the Windows platform.

5/12: Tilebot-EV Worm Also an IRC Backdoor Trojan

W32/Tilebot-EV is a worm and IRC backdoor Trojan for the Windows platform.

5/12: Brontok-AE a Mass-Mailing Worm

W32/Brontok-AE is a mass-mailing worm for the Windows platform.

5/12: Hacktool.DDEExploit Trojan Exploits Flaw

Hacktool.DDEExploit is a Trojan horse that attempts to exploit the Microsoft Windows NetDDE Privilege Escalation Vulnerability (as described in Microsoft Security Bulletin MS02-071).