Malware: Archive: June 2008

6/30: Bdoor-AMH Trojan Edits Registry Value, Connects to Remote Host

Troj/Bdoor-AMH is a Trojan for the Windows platform.

6/30: Mal/VB-X a Malicious Program

Mal/VB-X is a malicious program.

6/30: AutoRun-FV Worm Has IRC Backdoor Functionality

W32/AutoRun-FV is a worm with IRC backdoor functionality for the Windows platform.

6/30: FakeAle-CT Trojan Creates Registry Entries

Troj/FakeAle-CT is a Trojan for the Windows platform.

6/30: Blusod Trojan Disables System Restore Upon Running File

W32/Blusod is a Windows systems Trojan.

6/30: MumaWow a Parasitic File Infector and Network Worm

W32/MumaWow is a parasitic file infector and network worm that searches local drives and network shares for executable files and infects them.

6/30: StartPage-JU.dldr a Start Page Modifier Trojan

StartPage-JU.dldr is a start page modifier Trojan.

6/30: Mal/Repl-A Malcious Script Exploits Real Player Flaw

Mal/Repl-A is a malicious script that attempts to download and execute further files by exploiting a vulnerability in some versions of Real Player.

6/30: Mal/EncPk-BP Program Used by Malware Authors

Mal/EncPk-BP is a program that has been packed with a protection system typically used by malware authors.

6/27: Agent-HDN Trojan Drops Files, Installs Service

Troj/Agent-HDN is a Trojan for the Windows platform.

6/27: JS/Generic AdClicker.w Trojan Clicks on Banner Ads

JS/Generic AdClicker.w will access multiple websites in the background and click on banner advertisement to generate revenue for the trojan's author.

6/27: DwnLdr-HEQ Trojan Silently Downloads Code from Internet

Troj/DwnLdr-HEQ is a downloader Trojan for the Windows platform.

6/27: Kantak.worm Virus Uses AutoIt Script to Spread

W32/Kantak.worm is a virus that makes use of an AutoIt script to spread.

6/27: Agent-HDP Trojan Downloads File From Preconfigured URL

Troj/Agent-HDP is a Trojan for the Windows platform.

6/27: Trojan.Blusod Drops Files onto Compromised System

Trojan.Blusod is a Trojan horse that may download files on to the compromised computer.

6/26: Mal/EncPk-CE Program Used By Malware Authors

Mal/EncPk-CE is a program that has been packed with a protection system typically used by malware authors.

6/26: JS_Iframe.OY JavaScript Malware Accesses Web Sites

JS_Iframe.OY is JavaScript (JS) malware that may be downloaded from remote sites by HTML_IFRAME.OZ.

6/26: Agent-HDF Trojan Copies Itself to .Exe File

Troj/Agent-HDF copies itself to (System)\userinit.exe.

6/26: OSX/Pokerstlr-A Mac Trojan Arrives as App Package

OSX/PokerStlr-A is a Trojan for the Macintosh platform.

6/26: AdClicker-GD Trojan Script Runs Pop-Up Ads

AdClicker-GD is a Trojan script that will run pop up advertisements when surfing to a website hosting it.

6/26: HTML_Iframe.OZ Detects Compromised HTML Pages

HTML_Iframe.OZ is the Trend Micro detection for HTML pages and compromised Web sites that contain malicious iFrame tags.

Yahoo Mail Hit by Scripting Vulnerability

Vendor admits it had a serious security flaw, but was anyone hurt?

6/26: OSX/PWS-Corpref Password-Stealing Trojan Targets Mac

OSX/PWS-Corpref is a password-stealing Trojan that targets Apple Macintosh OS X (MacOS X) users that masquerade to be a poker game program.

6/26: Drop-AF Trojan Drops FIle, Creates Registry Entries

Troj/Drop-AF is a Trojan that when run drops a file.

6/26: Pidief.AC Trojan Exploits Acrobat Reader Flaw

W32/Pidief.AC is a Trojan that will infect Windows systems.

6/26: FakeAV-AC Trojan Creates Antivirus Files

Troj/FakeAV-AC includes functionality to access the internet and communicate with a remote server via HTTP.

6/26: Trojan.Proscks Infects Files, Gives Remote Attacker Access

Trojan.Proscks is a Trojan horse program that infects files and allows a remote attacker to create a Web proxy on the compromised computer.

6/26: Sankezu.A Worm Modifies Registry, Disables Registry Editor

W32/Sankezu.A is a worm that will infect Windows systems and spreads via physical and removable drives.

6/25: FakeAV-AB Trojan Reports Non-Existent Threats

Troj_FakeAV-AB Trojan reports a large number of non-existent threats and then asks the user to pay to register the product and remove them.

6/25: FakeAle-CO Trojan Targets Windows

Troj/FakeAle-CO is a Trojan for the Windows platform.

6/25: Mal/Banspy-F a Malicious Windows Program

Mal/Banspy-F is a malicious program for the Windows platform.

6/25: Mal/Banspy-F Malicious Program Steals Information

Mal/Banspy-F is a malicious program for the Windows platform.

6/25: HTool-T2W a Trojan Tool Kit

HTool-T2W is a Trojan Tool Kit that is capable of converting any executable into a worm with auto spread capability.

6/25: OSX.Klog.A Trojan Records Keystrokes

OSX.Klog.A is a Trojan horse that attempts to record keystrokes from the compromised computer.

6/25: Pokerstlr.A Backdoor Asks For Admin's Password

Bkdr_Pokerstlr.A backdoor may be installed manually by a user.

6/24: Mal/EncPk-EC a Maliciously Packed Executable File

Mal/EncPk-EC is a malicious packed executable file.

Vendor Plugs Mobile Device Security

New antivirus tool detects malware based on application behavior.

6/24: Bkdr_Hovdy.A Backdoor Runs Hidden, Gives Access

Bkdr_Hovdy.A is a backdoor may be installed manually by a user.

6/24: Pushu-Gen Trojan Family Creates Files

Troj/Pushu-Gen is a family of Trojans for the Windows platform.

6/24: VBS/Redlof a VBScript Worm Arriving in Email

VBS/Redlof is a VBScript worm.

6/24: Pushdo-Gen Trojan Family Drop, Run File

Troj/Pushdo-Gen is a family of Trojans for the Windows platform.

6/24: Mal/BVSysmm-A Worm Family Spreads Via Removable Media

Mal/VBSysmm-A is a family of worms that spread using removable media.

6/24: VBS/Roor a VBScript Virus

VBS/Roor is a VBScript virus.

6/24: Nuwar.YH Worm Disables Console Tracing, Firewall Settings

W32/Nuwar.YH is a worm that will infect Windows systems.

6/24: FakeAlert-AO Trojan Displays Fake Warning Message

Similar to other malwares of this family, FakeAlert-AO Trojan shows a fake warning message, alarming the user that their machine is infected or at risk.

6/23: XM97/Slcker-Gen Virus Creates XLS File

XM97/Slcker-Gen virus creates an XLS file called BOOK1 in the XLSTART folder.

6/23: Agent-HDA Trojan Creates Multiple Files

Troj/Agent-HDA is a Trojan for the Windows platform.

6/23: Wyhit Worm Creates XZB Folder in All Drives

WyHit is a worm that is capable of spreading through removable devices and network shares.

6/23: Bancos-BEC Trojan Redirects Sites to Fake Addresses

When first run Troj/Bancos-BEC Trojan copies itself to (Temp)\win32.exe.

6/23: OSX/Hovdy-A Trojan Targets Mac Platform

OSX/Hovdy-A is a Trojan for the Macintosh OSX platform.

6/23: Bdoor-AMC Trojan Gives Intruder Remote System Access

Troj/Bdoor-AMC is a Trojan that allows a remote intruder to gain access and control over the computer.

6/23: Mdrop-BTK Trojan Creates Multiple Files

Troj/Mdrop-BTK is a Trojan for the Windows platform.

6/20: Dropper.DDP a Self-Extracting Trojan

W32/Dropper.DDP is a self-extracting Windows Trojan that arrives as an attachment to email messages spammed by another malware or a malicious user.

6/20: Mbroot-A Trojan Contacts Server, Installs File

Troj/Mbroot-A includes functionality to access the internet and communicate with a remote server via HTTP.

6/20: Nuwar.YH Worm Disables Console Tracing

Worm_Nuwar.YH may be downloaded from remote site(s) by other malware.

6/20: Agent-HCV Trojan Copies Itself, Creates Files

Troj/Agent-HCV is a Trojan for the Windows platform.

6/20: Nuwar Virus Sends Fake News About Beijing Earthquake

W32/Nuwar@MM spam messages now contain fake news about an earthquake in Beijing and how it may affect the upcoming Olympic games.

6/20: VBS/Autorun-FM Worm Deletes System Files

VBS/Autorun-FM is a worm for the Windows platform.

6/20: Sality.ag Parasitic Virus Infects PE Files

W32/Sality.ag is a parasitic virus that infects Win32 PE executable files.

6/20: Dzan-H Trojan Contacts Remote Server Via Http

W32/Dzan-H is a Trojan for the Windows platform that includes functionality to access the internet and communicate with a remote server via HTTP.

Lazy Hacker Trick: Tricking Script Kiddies

Panda software notes a new approach to an old way of producing malicious code.

6/20: Bat/Apogo-B Worm Takes Part in DoS Attack

Bat/Apogo-B is a worm for the Windows platform.

6/20: OSX.Astht.A Trojan Opens Back Door

OSX.Astht.A is a Trojan horse that opens a back door on the compromised computer.

6/20: OSX.Astht.B Trojan Exploits Privilege Escalation Flaw

OSX.Astht.B is a Trojan horse that installs itself on the compromised computer by exploiting a privilege escalation vulnerability.

6/20: Mal/Bank-A Trojan Steals Information

Mal/Bank-A is a banking Trojan that steals information.

6/20: Ircbrute.A Worm Copies Itself to Removable Drives

W32.Ircbrute.A is a worm that spreads by copying itself to removable drives.

6/19: Dropper.DDP a Self-Extracting Trojan

Troj_Dropper.DDP is a self-extracting Trojan that arrives as attachment to email messages spammed by another malware or a malicious user.

6/19: Mal/BHO-I A Malicious Browser Help Object

Mal/BHO-I is a malicious Browser Helper Object.

6/19: Helpud.AB a Memory-Resident Trojan

Troj_Helpud.AB memory-resident Trojan arrives as attachment to email messages spammed by another malware or a malicious user.

6/19: Mal/BHO-J a Malicious Browser Help Object

Mal/BHO-J is a malicious Browser Helper Object.

6/19: Mal/TibsPk-D a Malicious Program

Mal/TibsPk-D is a malicious program.

6/19: PE_Sality.EK File Infector May be Downloaded

PE_Sality.EK file infector may be downloaded from remote sites by other malware.

6/19: Mal/FakeAle-A Malware Displays Fake Infection Warnings

Mal/FakeAle-A is a family of malware that may display spurious warnings about the computer being infected with other malware.

Eset Aims for Mobile Protection Against Digital Threats

Mobile devices make a tempting target for hackers and malicious viruses. Eset wants to prevent trouble before it starts.

6/19: Mal/AntiSC-A a Rogue Anti-Spyware Application

Mal/AntiSC-A is a rogue anti-spyware application reporting fake infections in an attempt to persuade the user to pay for cleanup.

6/18: Mal/TinyDL-T Malware is Behavior Based

Detection for members of Mal/TinyDL-T malware is behavior based.

6/18: Mal/EncPk-ED Program Used by Malware Authors

Mal/EncPk-ED is a program that has been packed with a protection system typically used by malware authors.

6/18: Dloadr-BMV Trojan Copies Itself, Creates File

Troj/Dloadr-BMV is a Trojan for the Windows platform.

6/18: Zlob.CCS Trojan Checks User's Browsing Activities

W32/Zlob.CCS is a Trojan that will infect Windows systems.

6/18: Iframe-AG Trojan Redirects Browser

Troj/Iframe-AG is a Trojan for the Windows platform that redirects the browser to a malicious site.

6/18: FakeVir-BX Trojan Displays Fake Virus Alerts

Troj/FakeVir-BX is a Trojan for the Windows OS that displays fake virus alerts on the computer and attempts to entice users to purchase dubious security software.

6/18: Delf-FAS a Windows Downloader Trojan

Troj/Delf-FAS is a downloader Trojan for the Windows platform.

6/17: Mal/EncPk-EB Program Used By Malware Authors

Mal/EncPk-EB is a program that has been packed with a protection system typically used by malware authors.

6/17: Agent-HCQ Trojan Drops Files, Steals Information

Troj/Agent-HCQ is a Trojan for the Windows platform.

6/17: VBS/AutoRun-FG a VBScript Windows Worm

VBS/AutoRun-FG is a VBScript worm for the Windows platform.

6/17: Banloa-FK Trojan Tries to Download File From Site

Troj/Banloa-FK is a Trojan for the Windows platform.

6/17: Zlob.CCS Trojan Modifies Registry

W32/Zlob.CCS is a Trojan will infect Windows systems.

6/17: Bdoor-ALX Trojan Contacts Remote Server Via Http

Troj/Bdoor-ALX is a Trojan for the Windows platform.

6/17: Backdoor.Disgufa Trojan Opens Back Door

Backdoor.Disgufa is a Trojan horse that opens a back door on the compromised computer.

6/17: Bkdr_IRCBot.BGY Backdoor in the Wild

At least two security vendors have issued alerts for Bkdr_IRCBot.BGY, a backdoor that may be dropped by other malware.

6/16: BanSpy-H Trojan Modifies Host File, Redirecting Users

Troj/BanSpy-H modifies the host file to redirect users to a malicious site when they try to access common online banks.

6/16: FakeVir-BV Trojan Reports Fake File Infections

Troj/FakeVir-BV is a Trojan for the Windows platform.

6/16: Agent-HCM a Windows Trojan

Troj/Agent-HCM can be used to send DoS attacks.

6/16: Agent-HCL Trojan Used to Send DoS Attacks

Troj/Agent-HCL can be used to send DoS Attacks.

6/16: Xpaj Virus Infects Several FIle Extensions

W32.Xpaj is a virus that infects .exe, .dll and .sys files on the compromised computer

6/16: Mal/EncPk-EB Program Used by Malware Authors

Mal/EncPk-EB is a program that has been packed with a protection system typically used by malware authors.

6/16: Zlob.CCS Trojan May be Downloaded From Remote Sites

Troj_Zlob.CCS is a memory-resident Trojan that may be downloaded from remote sites by other malware.

6/16: Ciadoor-DU Trojan Creates Files Upon Installation

Troj/Ciadoor-DU is a Trojan for the Windows platform.

6/16: Agent.DGW Trojan Unknowingly Downloaded

Agent.DGW Trojan is dropped by other malware.

6/16: X97M/Slacker Macro Virus Infects Excel Documents

X97M/Slacker is a macro virus that infects Excel documents.

6/16: Agent.THL Worm Opens File of Unreadable Characters

Worm_Agent.THL arrives as attachment to email messages spammed by another malware or a malicious user.

6/16: Zlob-CCT Trojan Drops Copy of Itself in Temp Folder

Troj_Zlob.CCT is a memory-resident Trojan that may be dropped or downloaded from remote sites by other malware.

6/13: Bifrose-VW Trojan Creates Files, Registry Entry

Troj/Bifrose-VW is a Trojan for the Windows platform.

6/13: Bckdr-QNU Trojan Performs Multiple Functions

Troj/Bckdr-QNU is a backdoor Trojan for the Windows platform, which allows a remote intruder to gain access.

6/13: AutoRun-FD Worm Gives Remote Intruder Access

W32/AutoRun-FD is a worm that runs continuously in the background, providing a backdoor server that allows a remote intruder to gain access and control over the computer via IRC channels.

6/13: Agent-HCG Trojan Creates Randomly Named DLL File

Troj/Agent-HCG is a Trojan for the Windows platform.

6/13: VBS/AutoRun-FE a Windows Worm

VBS/AutoRun-FE is a worm for the Windows platform.

6/13: FakeAle-CF Trojan Claims to be Anti-Spyware Software

Troj/FakeAle-CF claims to be anti-spyware software.

6/13: VBS.Solow.G Worm Copies Itself to Removable Drives

VBS.Solow.G is a worm that spreads by copying itself to removable drives.

6/13: Looked-EH Virus Infects .Exe Files

W32/Looked-EH Virus infects .exe files on the computer.

6/13: Nebuler-R Trojan Creates File, Registry Entries

Troj/Nebuler-R is a Trojan for the Windows platform.

6/12: Bdoor-ALL a Backdoor, Keylogging Windows Trojan

Troj/Bdoor-ALL is a backdoor and keylogging Trojan for the Windows platform.

6/12: PE_Patchep.A File Infector Executes .DLL File

PE_Patchep.A is a file infector that may be dropped by other malware.

6/12: Agent.NWK Trojan Creates Service

W32/Agent.NWK is a Trojan that copies itself as CbEvtSvc.exe in Windows System folder upon execution.

6/12: Qhost-Q Trojan Installs Files, Modifies Hosts File

Troj/Qhost-Q is a Trojan for the Windows platform.

6/12: Ranck-FU Trojan Creates Registry Entries

Troj/Ranck-FU is a Trojan for the Windows platform.

6/12: Backdoor.Bifrose.L Trojan Opens System Back Door

Backdoor.Bifrose.L is a Trojan horse that opens a back door on the compromised computer.

6/12: Agent-HCD Trojan Copies Itself With Random Name

Troj/Agent-HCD is a Trojan for the Windows platform.

6/12: J2ME/Hoaxer.A Trojan Distributed on Mobile Devices

J2ME/Hoaxer.A Trojan is distributed on a mobile device as a class file named "c.class1."

6/12: Downloader-BIW Trojan Drops Malicious Files from Sites

Downloader-BIW is a Trojan that attempts to download malicious files from remote sites.

6/12: Bdoor-ALP Trojan Contacts Remote Server Via Http

Troj/Bdoor-ALP is a Trojan for the Windows platform.

6/11: AntiAV-C Trojan Gives Intruder Remote System Access

Troj/AntiAV-C is a Trojan for the Windows platform.

6/11: JS/Downloader-AUF Detection for Malicious Javascript

JS/Downloader-AUF is a detection for malicious code written in Javascript.

6/11: J2ME/SMSFree.B Trojan Sends SMS Messages from PDA Device

J2ME/SMSFree.B is a Trojan distributed in a JAR file named "SUPER_HALYAVNYE_SMS_MMS.jar."

6/11: Agent-HCA Trojan Runs Automatically During System Startup

Troj/Agent-HCA is registered as a new system driver service named "TCPIPSSP," with a display name of "TCP/IP Security Support Provider" and a startup type of automatic, so that it is started automatically during system startup.

6/11: BanSpy-H Trojan Modifies Host File, Redirecting Users

Troj/BanSpy-H modifies the host file to redirect users to a malicious site when they try to access common online banks.

6/11: Trojan.Downexec.B!inf Drops, Executes Malicious Files

Trojan.Downexec.B!inf is a detection for files infected with code that downloads and executes potentially malicious files.

6/11: Dialer-FG Trojan Peforms Multiple Functions

Troj/Dialer-FG Trojan performs multiple functions.

6/10: DwnLdr-HEG a Download, Dropper Trojan

Troj/DwnLdr-HEG is a download and dropper Trojan for the Windows platform.

6/10: Agent-HBR Trojan Performs Multiple Functions

Troj/Agent-HBR is a Trojan for the Windows platform.

6/10: Vundo.gen.c Trojan Displays Pop-up Ads

Vundo.gen.c is a Trojan displaying unsolicited pop-up advertisements and enticing users to install rogue anti-spyware or anti-virus programs and can be spread by malicious websites and spam emails.

6/10: Autorun-EZ Worm Creates Files Upon Installation

W32/Autorun-EZ is a worm for the Windows platform.

6/10: Mal/DocDrop-A a Malicious Office Document

Mal/DocDrop-A is a malicious Microsoft Office document that has been specially crafted to drop and execute malware.

6/10: Bckdr-QNV Trojan Copies Itself, Creates Files

Troj/Bckdr-QNV is a Trojan for the Windows platform.

6/10: Gpcode.AD Trojan Encrypts Certain Files

Troj_Gpcode.AD Trojan may be downloaded from remote sites by other malware.

6/10: Mal/ExpJS-H Malicious Web Page Exploits Client-Side Flaws

Mal/ExpJS-H is a malicious web page intended to exploit client-side vulnerabilities in order to download and execute other malicious content.

6/10: Spideyit.A Worm Spreads Via Yahoo! IM, Network Shares

Win32/Spideyit.A is a worm that spreads via Yahoo! Instant Messenger and network shares.

6/10: Mal/EncPk-DZ Program Used by Malware Authors

Mal/EncPk-DZ is a program packed with a protection system typically used by malware authors.

6/10: Agent-SIV Trojan Copies Itself, Modifies Registry

W32/Agent.SIV is a Trojan that will infect Windows systems.

6/9: Mdrop-BTC Trojan Copies, Installs Itsef to Windows Folder

Troj/Mdrop-BTC is a Trojan for the Windows platform.

6/9: GPCoder.i Trojan Encrypts Files On Victim's PC

GPCoder.i is a Trojan that encrypts files on the victim’s PC and drops a ransom note with the contact details of the author.

6/9: JS/Exploit-IFrame Trojan Targets Malicious IFrames

JS/Exploit-IFrame Trojan detects malicious IFrames written in Javascript that are embedded on legitimate websites, as well as purposely designed malicious websites.

6/9: Gida-E a Shockwave Flash Trojan

Troj/Gida-E is a Shockwave Flash Trojan.

6/9: Shutdown Trojan Arrives as Dropped File of Other Malware

W32/Shutdown is a Trojan that will infect Windows systems.

6/9: Iframe-AG Trojan Redirects Browser to Dangerous Site

Troj/Iframe-AG is a Trojan for the Windows platform that redirects the browser to a malicious site.

6/9: Stayt.A Virus Infects Executable Files

W32.Stayt.A is a virus that infects executable files on the compromised computer and attempts to download other files from the Internet.

6/9: Mal/ObJS-AV a Malicious JavaScript Trojan

Mal/ObfJS-AV is a malicious JavaScript Trojan within a web page.

6/9: Mal/iIframe-J a Compromised Web Page

Mal/Iframe-J is a web page that has been incompletely compromised by a malicious attack.

6/6: Banker-ELX Trojan Targets Brazilian Bank Users

Troj/Banker-ELX is a Trojan for the Windows platform.

6/6: NtRootK-DP a Rootkit Trojan

Troj/NtRootK-DP is a rootkit Trojan for the Windows platform.

6/6: Delf-EZZ Trojan Contacts Remote Server Via Http

Troj/Delf-EZZ is a Trojan for the Windows platform.

6/6: PSW-FG Trojan Hits Windows Systems

Troj/PSW-FG is a Trojan for the Windows platform.

6/6: Dwnldr-HEC Trojan Drops File From Preconfigured URL

Troj/Dwnldr-HEC is a Trojan downloader for the Windows platform.

6/6: Iframe-AH a JavaScript Trojan Displaying Pop-Up Ads

Troj/Iframe-AH is a JavaScript Trojan that displays advertising pop-ups.

6/6: Small-ELP Trojan Disables Security Software

When first run Troj/Small-ELP Trojan copies itself to Windows\xxx.exe.

6/6: Evolym Worm Spreads Via Email, IM and Copying Itself

W32.Evolym is a worm that spreads through email, Instant Messaging clients and by copying itself to removable drives.

6/6: BanSpy-G A Banking Spy Trojan

Troj/BanSpy-G is a banking spy Trojan.

6/5: BHO-FR Trojan Creates Files, Registry Entries

Troj/BHO-FR is a Trojan for the Windows platform.

6/5: NtRootK-DO a Rootkit Trojan

Troj/NtRootK-DO is a rootkit Trojan for the Windows platform.

6/5: BHO-FQ Trojan Ends Anti-Adware Programs

Troj/BHO-FQ is a Trojan for the Windows platform.

6/5: Cutwail Trojan Downloads, Runs Arbitrary Files

Cutwail is a Trojan capable of downloading and running arbitrary files on infected hosts.

6/5: Dloader.XCU Trojan Opens IE to Display Image

Troj_Dloader.XCU Trojan may be dropped by other malware.

6/6: Hacktool.Rootkit Detects Infects System Drivers

Hacktool.Rootkit!inf is a generic detection for infected system drivers that uses Rootkit techniques.

6/5: IRCBot.CAE Trjan Drops .Exe File

W32/IRCBot.CAE is a Windows Trojan that upon execution, drops wifibooter.exe in Windows System folder.

6/6: FakeAle-BW Trojan Creates Antivirus Files

Troj/FakeAle-BW is a Trojan for the Windows platform.

6/6: Banloa-FI Trojan Downloads, Installs and Runs Software

Troj/Banloa-FI is a Trojan for the Windows platform.

6/6: Sohanad-A Trojan Contacts Remote Server Via Http

W32/Sohanad-A includes functionality to access the internet and communicate with a remote server via HTTP.

6/4: Spyware.TupInsight Monitors Net Use

Spyware.TupInsight is a spyware that monitors a user's Internet use.

6/4: Mal/Dorf-N is Linked to in Spam

Mal/Dorf-N is malware that is often delivered via links in spam.

6/3: JS/Agent-HAX is Windows Trojan

JS/Agent-HAX is a Trojan that attacks the Windows platform.

6/3: Troj/Delf-EZX Connects to Remote Server

Troj/Delf-EZX can access the internet and connect with a remote server.

6/2: Troj/Agent-HAS Installs in Registry

This Trojan installs itself in the registry.

6/2: Troj/Dload-BT is Windows Trojan

At this point this Trojan is relatively rare.