Malware: Archive: June 2006

6/30: Dloader.BYO Macro Virus is Embedded in Word Doc

W97M_Dloader.BYO is a macro virus that arrives on an affected system embedded in a Microsoft Word .DOC file, which may either be dropped by other malware or downloaded unknowingly by a user when visiting malicious Web sites.

6/30: OSX.Exploit.Launchd Trojan Exploits Apple OS X Flaw

OSX.Exploit.Launchd is a Trojan horse that exploits the Apple Mac OS X LaunchD Local Format String Vulnerability (as described in Security Focus BID 18724).

6/30: Yabe.Q Trojan Arrives as Email Attachment

Troj_Yabe.Q is a Trojan that may arrive as an attachment to a spammed email message that appears to be coming from eBay.

6/30: Perl_Nivek.A a POC Flaw That Targets Mac OSX 10.4

Perl_Nivek.A is Trend Micro's detection for a proof-of-concept (POC) vulnerability that affects systems running on Macintosh OSX 10.4

6/30: Ircbot.Cr Backdoor Program is Downloaded

Bkdr_Ircbot.Cr is a backdoor program that may be downloaded from the following Web site or dropped by other malware programs: http://h1.{BLOCKED}way.com/q4lambda/colors.exe

6/30: Trojan.Clagger Arrives as Ebay Email Attachment

Trojan.Clagger is a Trojan horse that attempts to download and execute a file from the Internet.

6/30: Clagger-U Trojan Downloads Further Malicious Code

Troj/Clagger-U is a Trojan for the Windows platform.

6/30: ConHook-K Trojan Continues to Target Windows

For the second time this month, security vendor Sophos has issued an alert for Troj/ConHook-K, a Trojan for the Windows platform.

6/30: Akbot-AB a Network Worm and Backdoor Trojan

W32/Akbot-AB is a network worm and backdoor Trojan for the Windows platform.

6/30: OSX/Leap-A IM Worm Spreads Via iChat

OSX/Leap-A is an instant-messaging worm for the Mac OS X platform.

6/30: Banker-CLP a Windows Trojan

Troj/Banker-CLP is a Trojan for the Windows platform.

6/30: Zlob-PH Trojan Targets Windows

Troj/Zlob-PH is a Trojan for the Windows platform.

6/30: StartPage-IU Trojan Modifies IE Start Page

StartPage-IU is a Trojan that modifies the default start page in Internet Explorer by displaying threatening message on it.

6/30: Trojan.Zlob.L Downloads, Executes Files

Trojan.Zlob.L is a Trojan horse that downloads and executes remote files and redirects the Internet Explorer home page and search page.

6/30: Keylog-Lamek a Trojan Keylogger

Keylog-LameK is a Trojan keylogger that logs all the keystrokes that are typed by the user.

6/30: IRCBot-NN a DLL Helper Component Trojan

Troj/IRCBot-NN is a DLL helper component Trojan for the Windows platform.

IE, Firefox Users at Risk From New Flaws

New flaws considered 'less critical' by one group and 'hair raising' by another.

6/29: Sality.S Virus Spreads by Infecting Executable Files

W32.Sality.S is a virus that spreads by infecting executable files.

6/29: Trojan.Bookmarker.K Changes IE Startup Page

Trojan.Bookmarker.K is a Trojan horse that changes the Internet Explorer startup page and adds several bookmarks.

6/29: Downloader-AWH Drops URL

Downloader-AWH detection is for a file that serves as a downloading/ updating component.

6/29: Dloader.BVS Macro Virus Arrives in Word File

WM97/Dloader.BVS is a macro virus that arrives on an affected system as a file embedded in a Microsoft Word .DOC file.

6/29: Backdoor.Graybird.S Trojan Hides Its Presence

Backdoor.Graybird.S is a Trojan horse that opens a back door, hides its presence on the compromised computer, and downloads remote files.

6/29: Kuku-B a Windows Downloader Trojan

Troj/Kuku-B is a Trojan downloader for the Windows platform.

6/29: Dloadr-AHY Trojan Communicates With Server

For the second time this month, security vendor Sophos has issued an alert for Troj/Dloadr-AHY, a Trojan for the Windows platform.

6/29: DwnLdr-DFE a Downloader Trojan

Troj/DwnLdr-DFE is a downloader Trojan for the Windows platform.

6/29: Kukudr-Fam Trojan Drops Word Document

WM97/Kukudr-Fam is a Trojan dropping Word document.

6/29: Backdr-D Trojan Continues to Spread

For the second time this week, security vendor Sophos has issued an alert for Troj/Backdr-D, a backdoor Trojan for the Windows platform.

6/29: Infostealer.Jianghu Trojan Steals Game Information

Infostealer.Jianghu is a password stealing Trojan horse that attempts to steal sensitive information related to the game Re Xue Jiang Hu.

6/28: Kukudro Macro Trojan Arrives as Zip Attachment

W97M/Kukudro is a macro Trojan that arrives as a Zip file attachment.

6/28: Dloader.BKV Macro Virus Arrives as Word File

W97M_Dloader.BKV is a macro virus that usually arrives as a Microsoft Word document file dropped by other malware or as a file downloaded unknowingly by a user when visiting malicious Web sites.

6/28: Banker-CLQ an Internet Banking Trojan

Troj/Banker-CLQ is an internet banking Trojan for the Windows platform.

6/28: Downloader.JIH Trojan Drops Other Virus

Downloader.JIH is a Trojan that downloads the virus Sality.S to the affected computer from a certain website.

6/28: Trojan.Hlinic.B Exploits HLINK.DLL Flaw

Trojan.Hlinic.B is a Trojan horse that exploits the Microsoft HLINK.DLL Link Memory Corruption Vulnerability (as described in Security Focus BID 18500) and may execute another program.

6/28: Small.AMB Trojan Arrives as Spammed Attachment

Troj_Small.AMB usually arrives on a system as an attachment to a spammed email message.

6/28: Icogon Virus Prepends Itself to System File

W32.Icogon is a virus that prepends itself to file found on the compromised computer.

6/28: Zlob-PJ Trojan Downloads, Installs Software

Troj/Zlob-PJ is a Trojan for the Windows platform.

6/28: Bagle-JJ Email Worm Downloads Data

W32/Bagle-JJ is an email worm for the Windows platform.

6/28: Opnis-E Trojan Targets Windows

Troj/Opnis-E is a Trojan for the Windows platform.

6/28: LdPinc-LZ a Password-Stealing Trojan

Troj/LdPinc-LZ is a password-stealing Trojan with backdoor functionality.

6/28: Opnis-F Trojan Creates File Upon Installation

Troj/Opnis-F is a Trojan for the Windows platform.

6/28: Kukudro-B a Trojan Dropping Word Document

WM97/Kukudro-B is a Trojan dropping Word document.

6/28: Banleed.B Worm Steals Banking Information

W32.Banleed.B is a worm that steals banking information and spreads through network file shares.

6/28: Backdoor-CEP Trojan Spreads Manually

Backdoor-CEP is a Trojan detection.

6/28: Rbot-EMQ a Windows Worm and Trojan

W32/Rbot-EMQ is a worm and IRC backdoor Trojan for the Windows platform.

6/27: Kraze.a Prepending Virus Infects Executable Files

W32/Kraze.a is a Win32 prepending virus that can be infected upon Windows executable files.

6/27: Brontok-AZ a Mass-Mailing Windows Worm

W32/Brontok-AZ is a mass-mailing worm for the Windows platform.

6/27: LdPinch-LL a Password-Stealing Trojan

Troj/LdPinch-LL is a password-stealing Trojan for the Windows platform.

6/27: Kukudro-A a Trojan-dropping Word Document.

WM97/Kukudro-A is a Trojan-dropping Word document.

6/27: Backdoor-DIP Trojan Lowers Firewall Settings

Backdoor-DIP is a Trojan that lowers the firewall security settings and connects to a remote ip address to provide unauthorized access to the target machine.

6/27: Bancban-OJ Trojan Targets Windows

Troj/Bancban-OJ is a Trojan for the Windows platform.

6/27: Bagle.FF Worm Copies Itself as Zip Attachment

Worm_Bagle.FF propagates via email.

6/27: Rbot-EMO a Worm With Backdoor Functions

W32/Rbot-EMO is a network worm with backdoor functionality for the Windows platform.

6/27: Tilebot-FA Worm Exploits Flaws

W32/Tilebot-FA is a worm with backdoor functionality for the Windows platform.

6/27: Tilebot-FR Backdoor Worm Runs in Background

W32/Tilebot-FR is an IRC backdoor worm for the Windows platform.

6/27: Bagle-Zip Archive Files of Virus Continue to Spread

Sophos Anti-Virus is continuing to detect the presence of W32/Bagle-Zip as the password-protected archive files created by several Bagle variants.

6/27: Kraze.dr Malware Prepends Viral Code

W32/Kraze.dr prepends viral code detected as W32/Kraze to Windows executable files on the infected machine.

6/27: Backdoor.Beasty.J a Backdoor Server Program

Backdoor.Beasty.J is a backdoor server program that allows a remote attacker to obtain unauthorized access to a compromised computer.

6/27: Agent-CCS Trojan Logs IM Keypresses

Troj/Agent-CCS is a Trojan for the Windows platform.

6/27: Tilebot-FS Worm and Trojan Contacts Server

W32/Tilebot-FS is a worm and IRC backdoor Trojan for the Windows platform.

MessageLabs Takes Malware Fight To The Clouds

New Web Security Services tries to catch malware before it hits your computer.

6/26: Backdr-D Trojan Silently Downloads URL FIles

Troj/Backdr-D is a backdoor Trojan for the Windows platform.

6/26: Ranck-EN an HTTP Proxy Server Trojan

Troj/Ranck-EN is a HTTP proxy server Trojan.

6/26: Dloader.AVS Trojan Drops Copy of Itself

When executed, Troj_Dloader.AVS Trojan drops a randomly named copy of itself in certain folders.

6/26: Banker-BZV an Information-Stealing Trojan

Troj/Banker-BZV is an information stealing Trojan for the Windows platform.

6/26: Downloader.Browsilla Trojan Drops Browszilla.org Risks

Downloader.Browsilla is a Trojan horse that downloads other risks from the browsezilla.org domain onto the compromised computer.

6/26: Zlob-PG Trojan Targets Windows

Troj/Zlob-PG is a Trojan for the Windows platform.

6/26: Infostealer.Panobu Trojan Steals Game Password

Infostealer.Panobu is a Trojan horse that steals the password to the online game 'Nobunaga no Yabo' (Nobunaga's Ambition).

Technical details can be found at

6/26: Mytob-HX Worm Arrives as Email Attachment

W32/Mytob-HX is a worm for the Windows platform.

6/26: BAT.Antir BATScript Silently Deletes Files

BAT.Antir is a BAT script that silently deletes files from the compromised computer.

6/26: Backdoor.Harcarmy.G Trojan Opens Back Door

Backdoor.Hacarmy.G is a Trojan horse that connects to a predetermined IRC server and opens a back door on the compromised computer.

6/26: Trojan.Exobre Exploits Excel Flaw

Trojan.Exobre is a proof-of-concept Trojan horse that exploits the Microsoft Excel Unspecified Remote Code Execution Vulnerability (as described in Microsoft Security Advisory (921365)) to either crash Microsoft Excel or allow the remote attacker to run code on the compromised computer.

6/26: Mailbot-AJ Trojan Continues to Spread

For the third time this month, security vendor Sophos has issued an alert for Troj/Mailbot-AJ, a Trojan for the Windows platform.

6/26: Zlob.ACB Trojan Runs Specific Command

Troj_Zlob.ACB is a Trojan that may arrive on a system as a file downloaded by another malware.

When Is Spyware Not Spyware?

Reporter's Notebook: When it comes from a Windows Update, it seems.

6/26: Dropper.BHC Trojan Drops Files in Temporary Folder

Troj_Dropper.BHC is a Trojan that usually arrives on a system as a file downloaded by an unsuspecting user when visiting malicious Web sites.

Antivirus Software a Big Business. Surprised?

Gartner stats prove that preventing the bad stuff continues to be a good business, though with Microsoft's entry it's going to get a whole lot tougher.

6/26: Bkdr_Agent.AGV Backdoor Downloaded from Internet

Bkdr_Agent.AGV is a backdoor that arrives as a file downloaded from the Internet by an unsuspecting user when visiting malicious Web sites.

6/26: Bagle.fd Virus Mails Itself to Harvested Addresses

W32/Bagle.fd@mm is a mass-mailing virus that mails itself to email addresses harvested from the victim machine.

6/26: Bagle-KJ an Email Worm Targeting Windows

W32/Bagle-KJ is an email worm for the Windows platform.

6/23: Backdoor.Rajump Trojan Opens Back Door

Backdoor.Rajump is a Trojan horse that opens a back door on the compromised computer.

6/23; Perl_Shellbot.AV Perl Script Affects PHPBB Apps

Perl_Shellbot.AV is Perl script that usually arrives on a system as a downloaded file from a malicious Web site that an unsuspecting user visits.

6/23: StartPage-JI Trojan Modifies IE Start Page

StartPage-JI is a start page Trojan that modifies the start page of the Internet Explorer on the infected machine.

6/23: Trojan.Kuserv Restarts System, May Format C Drive

Trojan.Kuserv is a Trojan horse that restarts the computer and may format the C drive.

6/23: Delf.WC Trojan Arrives as Spammed Attachment

Troj_Delf.WC is a Trojan that may arrive on a system as an attachment to a spammed email message.

6/23: Banker-CTA an Information-Stealing Trojan

W32/Banker-CTA is an information-stealing Trojan, which may also worm through the Orkut network.

6/23: BagleDL-BG Trojan Continues to Flourish

For the second time this month, security vendor Sophos has issued an alert for Troj/BagleDL-BQ, a Trojan for the Windows platform.

6/23: Downloader.Booli.B Trojan Drops More Malware

Downloader.Booli.B is a Trojan horse program that downloads additional malware.

6/23: Backdoor.Pahador Trojan Logs Keystrokes

Backdoor.Pahador is a Trojan horse that opens a back door on the compromised computer and may attempt to log keystrokes.

6/23: Kidala.e Worm Gathers Email Addresses

W32.Kidala.e@mm is a mass-mailing worm that gathers email addresses from the compromised computer.

6/23: Dloadr-YD Trojan Targets Windows

Troj/Dloadr-YD is a Trojan for the Windows platform.

6/23: Perl.Lekbot.B Worm Exploits PHP Glaw

Perl.Lekbot.B is a worm that attempts to spread by exploiting the PHPBB Viewtopic.PHP PHP Script Injection Vulnerability (BID 10701).

Next-Gen Bank Trojans Are Upon Us

The next generation of banking Trojans are more powerful than ever.

6/23: Sashdown.A Trojan Exploits Excel Flaw

Troj_Sashdown.A is a Trojan that exploits the Microsoft Excel File Embedded Shockwave Flash Object vulnerability.

6/23: Trojan.Hlinic Exploits Microsoft HLINK.DLL Flaw

Trojan.Hlinic is a Trojan horse that exploits the Microsoft HLINK.DLL Link Memory Corruption Vulnerability (as described in Security Focus BID 18500) and prevents Excel from functioning correctly.

6/22: SymbOS.Romide.G Trojan Drops Corrupt Files

SymbOS.Romride.G is a Trojan horse that affects Symbian series 60 phones.

6/22: Amirecivel.E Worm Spreads Via File Sharing

W32.Amirecivel.E@mm is a mass-mailing worm that also spreads through file-sharing networks.

6/22: Urxcel.A A Proof Trojan May Arrive as Excel File

Troj_Urxcel.A is a proof of concept (PoC) Perl script Trojan that may arrive as a Microsoft Excel (.XLS) file.

6/22: SymbOS.Romride.F Trojan Executes When Opened

SymbOS.Romride.F is a Trojan horse that affects Symbian series 60 phones.

6/22: SymbOS.Romride.H Trojan Arrives As Nokia File

SymbOS.Romride.H is a Trojan horse that affects Symbian series 60 phones.

6/22: BackDoor-CZI Trojan Copies Itself to Directory

BackDoor-CZI is a Trojan that configures itself to load at startup and copies itself to the %WINDIR% directory.

6/22: Mytob-II Worm and Trojan Sends Mass Emails

W32/Mytob-II is a mass-mailing worm and IRC backdoor Trojan for the Windows platform.

6/22: Bagle-KN a Mass-Mail Worm and Trojan

W32/Bagle-KN is a mass-mailing worm and downloader Trojan for the Windows platform.

6/22: Bagle.FU Worm Copies Itself in Zip Attachment

Worm_Bagle.FU propagates via email.

6/22: Bagle.JQ Worm Disables Security Processes

Bagle.JQ is a worm that has rootkit functionalities, which allow it to hide files, processes and Windows Registry entries.

6/22: Beagle.FG Worm Downloads, Executes Files

W32.Beagle.FG@mm is a mass-mailing worm that uses its own SMTP engine to spread and may also download and execute remote files.

6/22: Zlob-OX Trojan Targets Windows

Troj/Zlob-OX is a Trojan for the Windows platform.

6/22: Downloader-AXA Trojan Retrieves File List

Downloader-AXA is a Trojan that upon execution, drops itself to: %WINDIR%systemer.exe

Windows Defender For All?

It's already one of the most popular downloads for Microsoft, but should it be available for those who haven't paid for Windows?

6/22: Kidala.A Worm Gathers Target Addresses

Worm_Kidala.A propagates by sending a copy of itself as an attachment to email messages, which it sends to target addresses using its own Simple Mail Transfer Protocol (SMTP) engine.

6/22: OutsBot an IRC-Controlled Backdoor Trojan

Win32/OutsBot is an IRC-controlled backdoor Trojan that allows unauthorized access to an affected machine.

6/22: Trojan.Flemex Found in Excel File

Trojan.Flemex is a proof-of-concept Trojan, Microsoft Excel file that contains an embedded Flash object that may contain JavaScript code.

6/22: Bagle.FC Virus Spreads in Password-Protected Zip File

W32/Bagle.FC@mm is a mass-mailing virus that spreads in a password protected zip file.

6/22: Del-507 Trojan Deletes System FIles

Del-507 is a Trojan designed to delete files in the victim machine.

6/21: Bagle.FN Worm Sends Itself as .Zip Attachment

Worm_Bagle.FN propagates via email.

6/21: BackDoor-AED Trojan Has Several Components

BackDoor-AED is a Remote Access Trojan consisting of a server component, client component and a server editor component.

6/21: Infostealer.Nailmews Trojan Arrives as ICQ Message

Infostealer.Nailmews is a Trojan horse that attempts to steal confidential information from the compromised computer.

6/21: BackDoor-AED.cfg a Remote Access Trojan

BackDoor-AED.cfg is a Remote Access Trojan consisting of a server component, client component and a server editor component.

6/21: ConHook-K Trojan Targets Windows

Troj/ConHook-K is a Trojan for the Windows platform.

6/21: IRC-Contact an IRC Controlled Backdoor

IRC-Contact is an IRC controlled backdoor, which consists of a bot component and a bot editor component.

6/21: Rbot-EHK Worm Steals Confidential Information

W32/Rbot-EHK is a worm with backdoor functionality For the Windows platform.

6/21: Bagle-KM Worm Harvests Email Addresses

W32/Bagle-KM is an email worm for the Windows platform.

6/21: Hlink.Dll a Vulnerability Used by Offices Apps

HLINK.DLL is not categorized as virus, worm, Trojan or backdoor.

6/21: Trojan.Rootserv Ends Security Processes

Trojan.Rootserv is a Trojan horse that uses kernel mode root kit technology to hide processes, files and registry entries.

6/21: Mytob-IF Worm and Trojan Gets Attacker's Commands

W32/Mytob-IF is a worm and IRC backdoor Trojan for the Windows platform.

6/21: Netsad.A Worm Copies Itself to Email

Worm_Netsad.A spreads by attaching a copy of itself to an email message, which it sends to target recipients using Simple Mail Transfer Protocol (SMTP) engine mx4.mail.yahoo.com.

6/21: Tilebot-FN Worm and Trojan Targets Windows

W32/Tilebot-FN is a worm and IRC backdoor Trojan for the Windows platform.

6/21: Akbot-AA Worm and Backdoor Exploits Flaws

W32/Akbot-AA is a worm and IRC backdoor for the Windows platform.

6/20: Downloader.Centim Trojan Drops Malicious Files

Downloader.Centim is a Trojan horse that downloads potentially malicious files onto the compromised computer.

6/20: MSIL.Kolilo Polymorphic Virus Infects .Exe Files

MSIL.Kolilo is a polymorphic virus that infects .exe files under the Microsoft .NET Framework.

6/20: LegMir-YY an Information-Stealing Trojan

Troj/LegMir-YY is an information-stealing Trojan for the Windows platform.

6/20: Rbot-EGJ Worm and Trojan Exploits Flaws

W32/Rbot-EGJ is a worm and IRC backdoor Trojan for the Windows platform.

6/20: Sixem-A Worm Sends World Cup Email

At least two security vendors have issued alerts for W32/Sixem-A, an email worm for the Windows platform.

6/20: Stac.A Worm Disables Task Manager, Lowers Settings

Worm_Stac.A spreads by attaching copies of itself to email messages, which it sends to target recipients using its own Simple Mail Transfer Protocol (SMTP) engine.

6/20: Beagle.FF Worm Mails Itself to Contacts

W32.Beagle.FF@mm is a mass-mailing worm that sends itself to contacts on the compromised computer.

US-CERT Warns of Unpatched Excel Flaw

Warning for Microsoft Excel users.

6/20: Bagle-KL Worm Harvests Email Addresses

W32/Bagle-KL is an email worm for the Windows platform.

6/20: Mytob-IT Worm Has Backdoor Trojan Functions

W32/Mytob-IT is a mass-mailing worm with IRC backdoor Trojan functionality.

6/19: Trojan.Haradong Deletes Local Files

Trojan.Haradong is a Trojan horse that deletes local files while displaying a downloaded file.

6/19: Infostealer.Wowcraft.D Trojan Steals Information

Infostealer.Wowcraft.D is a Trojan horse that attempts to steal password information for the World of Warcraft game and sends it to a remote attacker.

6/19: Bancos-API a Windows Trojan

Troj/Bancos-API is a Trojan for the Windows platform.

6/19: Bagle-KG Worm Attempts to Email Zipped Worm File

W32/Bagle-KG is a mass-mailing worm for the Windows platform.

6/19: Dropper-KS a Trojan Dropper on Windows

Troj/Dropper-KS is a Trojan dropper for the Windows platform.

6/19: Zlob-OS Trojan Communicates With Remote Server

Troj/Zlob-OS is a Trojan for the Windows platform.

6/19: Dloadr-AHR Trojan Targets Windows

Troj/Dloadr-AHR is a Trojan for the Windows platform.

6/19: Trojan.Slapew.C Lets System be Used as Email Relay

Trojan.Slapew.C is a Trojan horse that allows a compromised computer to be used as an email relay.

6/19: Trojan.Slapew.B Lets System be Used as Email Relay

Trojan.Slapew.B is a Trojan horse that allows a compromised computer to be used as an email relay.

6/19: PE_Ikola.A-O Virus Infects All Files in Folder

PE_Ikola.A-O is virus infects all files in the folder where it initially executes.

6/19: Xorpix-F Proxy Trojan Lets Attacker Route Traffic

Troj/Xorpix-F is a proxy Trojan that allows a remote attacker to route network traffic through the infected computer.

6/19: PE_Ikola.A Virus Infects Files Once Executed

PE_Ikola.A is a virus detected by Trend Micro for the files infected by the mother file infector PE_IKOL.A-O.

6/19: Symbos_Romride.A Malware Arrives Via Data Transfer

Symbos_Romride.A is Symbian malware that arrives via manual data transfer.

6/16: Zlob-RT a Downloader and Browser Hijacking Trojan

Troj/Zlob-RT is a downloader and browser-hijacking Trojan for the Windows platform.

6/16: Banker.DJH Trojan Monitors Internet Traffic

Banker.DJH is a Trojan that monitors Internet traffic generated when the user accesses web pages that contain certain text strings in their address, related to several online banking entities.

6/16: Looked.J Worm Infects .Exe Files

W32.Looked.J is a worm that spreads via network shares, infects .exe files and ends security-related processes.

6/16: RepKill-A Trojan Terminates Security Processes

Troj/Repkill-A is a Trojan for the Windows platform.

6/16: FeebDl-S Trojan Downloader Executes Components

Troj/FeebDl-S is a Trojan downloader for the Windows platform.

6/16: Stinx-W Trojan Claims to be CCTV Footage

Troj/Stinx-W is an IRC backdoor Trojan for the Windows platform.

6/16: Revolnam Virus Infects Executable Files

W32.Revolnam is a virus that spreads by infecting executable files.

6/16: Mytob-HY a Mass-Mailing Worm and Trojan

W32/Mytob-HY is a mass-mailing worm and IRC backdoor Trojan for the Windows platform.

6/16: Bkdr_Brepbot.A Backdoor Arrives as Attachment

Bkdr_Brepbot.A is a memory-resident backdoor that arrives on a system as an attachment to a spammed email message.

6/16: Infostealer.Gamania Trojan Steals Information

Infostealer.Gamania is a Trojan horse that steals information from the compromised computer.

6/16: Bagle.EY Trojan Drops Copy of Itself

Troj_Bagle.EY is a Trojan that arrives as an attachment to an email message spammed by a certain WORM_BAGLE variant.

6/16: MultiDropper-PY Drops, Executes Adware

MultiDropper_PY is a multidropper that is intended to drop and execute adware on the target machine.

6/16: Backdoor.Naninf.E Trojan Lowers Security Settings

Backdoor.Naninf.E is a Trojan horse with back door capabilities that lowers security settings on the compromised computer.

6/16: Sality.R Virus Spreads by Infecting .Exe Files

W32.Sality.R is a virus that spreads by infecting executable files.

6/15: Infostealer.Yohokie a Proof-of-Concept Trojan

Infostealer.Yohokie is a proof of concept Trojan horse that exploits a vulnerability in the Yahoo! Mail service.

6/15: Tilebot-FI Worm Exploits Several Flaws

W32/Tilebot-FI is a worm with backdoor functionality for the Windows platform.

6/15: Haxdoor-HM Trojan Gives Intruder Remote Access

Troj/Haxdoor-HM is a Trojan for the Windows platform.

6/15: Trojan.Slapew Uses Computer as Email Relay

Trojan.Slapew is a Trojan horse that allows a compromised computer to be used as an email relay.

6/15: SpyDldr-H Trojan Targets Windows

Troj/SpyDldr-H is a Trojan for the Windows platform.

6/15: Agent-CBA Trojan Attempts to Stealth Itself

Troj/Agent-CBA is a downloader Trojan for the Windows platform.

6/15: Doctrix-A Trojan May be Distributed with Filename

Troj/Doctrix-A is a Trojan for the Windows platform.

New Means To Root Out Malware

Webroot the latest to tackle spyware at the kernel level.

6/15: Bagle-KH Worm Contacts Remote Server

W32/Bagle-KH is a worm for the Windows platform.

6/14: Infostealer.Sealoln Trojan Steals Game Info

Infostealer.Sealoln is a Trojan horse that attempts to steal sensitive information related to the Seal Online game.

6/14: LdPinch-LL a Password-Stealing Trojan

Troj/LdPinch-LL is a password-stealing Trojan for the Windows platform.

6/14: FeebDL-R Trojan Downloads, Executes Files

Troj/FeebDl-R is a Trojan for the Windows platform.

6/14: Sdbot-BVK Worm and Trojan Exploits Flaws

Troj/Agent-CBA is a downloader Trojan for the Windows platform.

6/14: Adclick-CP Trojan Launches IE to Access URLs

Troj/Adclick-CP is a Trojan for the Windows platform.

6/14: Downloader.Booli.A Trojan Downloads Remote Files

Downloader.Booli.A is a Trojan horse that attempts to download remote files onto the compromised computer.

8 'Critical' Updates in Microsoft's Monthly Patch

Patches to Windows, Internet Explorer and Outlook close a number of backdoors and exploits.

6/14: Trojan.Mdropper.J Exploits Zero-Day Excel Flaw

Trojan.Mdropper.J is a Trojan horse that drops a file on the compromised computer.

6/13: Melo-E Worm Deletes Files on A: and C: Drives

W32/Melo-E is a worm for the Windows platform.

6/13: Zapchas-BM Trojan Gives Intruder Access

Troj/Zapchas-BM is a Trojan for the Windows platform.

6/13: Mailbot-AJ Trojan Targets Windows

Troj/Mailbot-AJ is a Trojan for the Windows platform.

6/13: Backdoor.Eterok.C Trojan Opens Back Door

Backdoor.Eterok.C is a Trojan horse that opens a back door on the compromised computer.

6/13: ZlobDrop-U Trojan Create Files Upon Installation

Troj/ZlobDrop-U is a Trojan dropper for the Windows platform.

6/13: Zlob-NW a Downloader Trojan

Troj/Zlob-NW is a downloader Trojan for the Windows platform.

6/13: BlackAngel.B Worm Disables Security Processes

BlackAngel.B is a worm that attempts to disable the processes belonging to several security tools, such as antivirus programs and firewalls, among others.

6/13: Backdoor.Daserf Trojan Dropped by .doc File

Backdoor.Daserf is a Trojan horse that opens a back door on the compromised computer, and is reportedly dropped by a .doc file that uses a 0-day exploit.

6/13: DwnLdr-DCY a Windows Trojan

Troj/DwnLdr-DCY is a Trojan for the Windows platform.

6/13: MultiDropper-QT Drops, Executes Trojan Downloader

MultiDropper-QT is a multidropper that is intended to drop and execute a Trojan downloader and worm on the target machine.

6/13: Rustock.C Backdoor Arrives as Dropped File

Bkdr_Rustock.C is a backdoor that usually arrives as a file dropped by other malware or as a file downloaded unknowingly by a user when visiting malicious Web sites.

6/12: JS.Yamanner Worm Exploits Yahoo Email Flaw

JS.Yamanner@m is a worm that is written in JavaScript.

6/12: Small-BWB a Downloader Trojan

Troj/Small-BWB is a downloader Trojan for the Windows platform.

6/12: Opanki-BT Worm Gives Intruder Access

W32/Opanki-BT is a worm with backdoor functionality for the Windows platform.

6/12: Trojan.Skowr Encrypts Files, Ends Processes

Trojan.Skowr is a Trojan horse that encrypts files, ends processes, overwrites the hosts file, disables Task Manager and drops files on the compromised computer.

6/12: Zapchas-BL a Multi-Component Trojan

Troj/Zapchas-BL is a multi-component backdoor Trojan for the Windows platform.

6/12: Detnat.G Virus Infects Executable Files

W32.Detnat.G is a virus that searches network shares and infects executable files.

6/12: Skowr.A Trojan Encrypts Files

Trend Micro has received reports about Troj_Skowr.A spreading in the wild, especially in Europe.

6/12: Downloader-AWU Trojan Pulls Files From Site

Downloader-AWU is a Trojan that serves as a downloading/ updating component.

Microsoft Makes Security The 'ForeFront'

At Tech Ed, officials unveil the company's new security brand and a plan to prepare for the Web services wave.

6/12: PE_Detnat.E a File Infector

PE_Detnat.E is a file infector that propagates through network shares.

6/9: Detnat.C a Parasitic File Infector and Worm

W32/Detnat.C is a parasitic file infector and network worm that searches local drives and network shares for executable files and infects them.

6/9: GPCoder Trojan Encrypts Documents

GPCoder is a Trojan that encrypts documents, depending on the file extension, and then attempts to extort money from the victim in order for them to obtain a decryptor tool to recover the documents.

6/9: Nopir.D Worm Spreads Via File Sharing

W32.Nopir.D is a worm that spreads through file-sharing networks.

6/9: Rbot-ECP Worm Exploits Weak Passwords

W32/Rbot-ECP is a network worm with backdoor functionality for the Windows platform.