Malware: Archive: November 2008

11/26: Downadup Email Worm Modifies Registry

W32/Downadup is an email worm that upon execution, the worm drops svchost.exe in the Windows System folder.

11/26: Mal/Conficker-A Worm Spreads by Exploiting Windows Flaw

Mal/Conficker-A is a worm for the Windows platform.

11/26: DR/Zlob.iwm a Dropper Virus

DR/Zlob.iwm is a dropper virus that downloads malicious files.

11/25: DwnLdr-HKW a Downloader Trojan

Troj/DwnLdr-HKW is a downloader Trojan for the Windows platform.

11/25: IRCBot-ADD Worm Copies Itself to Network, Removable Drives

W32/IRCBot-ADD is a worm for the Windows platform.

11/25: Networm.C Worm Logs On to Target Systems

Worm_Networm.C may be downloaded from remote Web sites by other malware.

11/25: Conficker Worm Exploits Flaw to Spread

W32/Conficker.worm exploits the MS08-067 vulnerability in order to spread.

11/25: Ransom.A Worm Copies Itself to Drives, Shares

W32.Ransom.A is a worm that spreads by copying itself to fixed drives and network shares.

11/25: Worm_Downad.A Arrives as Random .DLL File

Worm_Downad.A may be downloaded from remote sites by other malware.

11/25: AutoRun-QH Worm Copies Itself, Creates File

W32/AutoRun-QH is a worm for the Windows platform.

11/25: Pushdo-Z Trojan Copies Itself, Creates Registry Entries

Troj/Pushdo-Z is a Trojan for the Windows platform.

11/25: Mal/VidHtml-E Found On Fake YouTube, Other Video Pages

Mal/VidHtml-E is a malicious script that attempts to redirect to a malicious executable file.

11/25: Mal/VidHtml-D a Malicious Script

Mal/VidHtml-D is a malicious script that attempts to redirect to a malicious executable file.

11/25: Mal/VidHtml-F Script Pretends to be Flash Update

Mal/VidHtml-F is a malicious script that attempts to redirect to a malicious executable file.

11/25: AdbPat-A Trojan Hacks Adobe Acrobat 8.1

Troj/AdbPat-A is a Trojan that attempts to subvert and hack Adobe Acrobat 8.1 Professional application.

11/25: Sdbot-DNL Trojan Runs in the Background

W32/Sdbot-DNL is a Trojan for the Windows platform.

You Could be Getting Clickjacked

If you're not careful about where you click, you could become a victim of a clickjacking attack.

11/24: KGSpy.D TrojanDrops Files in Temp Folder

W32/KGSpy.D is a Trojan that may be dropped by other malware or may be downloaded from remote website by other malware.

11/24: FakeAV-GY Trojan a Fraudulent Anti-Spyware App

Troj/FakeAV-GY is a fraudulent anti-spyware application that calls itself "Pro Antispyware 2009."

11/24: Goldun-GG Trojan Installs Files

Troj/Goldun-GG Trojan installs the following files: (System)\acpiz.dll and (System)\acup.sys

11/24: Downadup Worm Exploits Microsoft Server Flaw

W32.Downadup is a worm that spreads by exploiting the Microsoft Windows Server Service RPC Handling Remote Code Execution Vulnerability (BID 31874).

11/24: Autorun-QF Worm Component Spreads Via USB Keys

W32/Autorun-QF is a component of a worm that spreads via USB keys.

11/24: AutoRun-QD a Windows Worm

W32/AutoRun-QD is a worm for the Windows platform.

11/24: Iframe-BN Malicious Script Silently Loads Other Malware

Troj/Iframe-BN is a malicious script that silently loads further malicious content from a remote site.

11/24: BackDoor-DTA Trojan Gives Remote Access

BackDoor-DTA Trojan provides remote access capabilities to an attacker by opening a backdoor on the compromised machine.

11/21: Agent-IIB Worm Copies Itself, Creates Files

W32/Agent-IIB is a Windows worm that includes functionality to access the internet and communicate with a remote server via HTTP.

11/21: Rscan.gen Trojan Launches iexplore.exe Process

Upon execution Rscan.gen Trojan launches iexplore.exe process in the background passing it a parameter as shell code, which attempts to take advantage of un-patched versions of iexplore.exe.

11/21: Autorun.worm.dw Spreads Across Drives

W32/Autorun.worm.dw has been observed to have worm like abilities to spread across drives.

11/21: Yahlov-C Worm Creates Files

W32/Yahlov-C is a worm for the Windows platform.

11/21: Dload-EL Trojan Copies Itself, Changes Registry Entry

Troj/Dload-EL is a Trojan for the Windows platform.

11/20: Mal/VidHtml-C Malicious Script Found on Bogus YouTube, Other Video Sites

Mal/VidHtml-C is a malicious script that attempts to redirect to a malicious executable file.

11/20: BrowPick-A Malicious Script Loads Other Malware

Troj/BrowPick-A is a malicious script that loads other malware based on the browser version.

11/20: Tibick Emai Worm Drops .Exe File

W32/Tibick is a Windows email worm that upon execution drops svcnet.exe in the Windows System folder.

11/20: Mal/ObfJS-BN Malicious JavaScript Within Web Page

Mal/ObfJS-BN is an obfuscated malicious JavaScript within a web page.

11/20: CryptBox-A Trojan Decrypts, Injects Other Components

Troj/CryptBox-A is a Trojan for the Windows platform.

11/20: Bdoor-AQS Backdoor Trojan Delivered Via Exploited Excel File

Troj/Bdoor-AQS is a backdoor Trojan for the Windows platform, known to be delivered via an exploited Microsoft Excel file.

11/20: Mal/VidHtml-B Malicious Script Redirects to Executable File

Mal/VidHtml-B is a malicious script that attempts to redirect to a malicious executable file.

11/20: Mal/EncPk-GB Program Used by Malware Authors

Mal/EncPk-GB is a program that has been packed with a protection system typically used by malware authors.

Besides Free Security, Microsoft Pulls Live OneCare

Buffeted by strong competition from existing antivirus vendors, the Redmond software giant offers an olive branch.

11/19: Magania.AKCP Trojan Drops Files, Modifies Registry

W32/Magania.AKCP is a Trojan that will infect Windows systems.

11/19: FakeAlert-BF.dr Trojan Displays Misleading Alerts

FakeAlert-BF.dr is a Trojan that displays misleading alerts to entice the user into buying a product to "repair" malware problems.

Microsoft to Offer Free Security Software

Microsoft Corp said Wednesday it will discontinue sales of its subscription PC security service and instead offer free software to help protect computers from viruses, spyware and other threats.

11/19: Mal/ObfJS-BM a Malicious, Embedded JavaScript

Mal/ObfJS-BM is a malicious JavaScript embedded in web pages that attempts to exploit browser vulnerabilities.

11/19: VunDrop-D Worm Copies Itself to Removable Drives

When first run, W32/VunDrop-D worm copies itself to (System)\kamsoft.exe and C:\abk.bat.

11/19: Bravo-I Trojan Copies Itself, Creates Registry Entries

Troj/Bravo-I is a Trojan for the Windows platform.

11/19: Mal/ObfJS-BP JavaScript Exploits Browser Flaws

Mal/ObfJS-BP is a malicious JavaScript embedded in a web page that will attempt to exploit browser vulnerabilities.

11/19: Fakealert.AGV Trojan May be Unknowingly Downloaded, Dropped

W32/Fakealert.AGV is a Windows Trojan that may be dropped by other malware or may be downloaded from remote website by other malware.

11/18: FakeAV-GS is Fradulent AntiVirus Software

Troj/FakeAV-GS is fraudulent antivirus software that claims to find malware that does not exist, and requests payment to remove them.

11/18: Banbra.GDB Worm Steals Confidential Bank Info

Banbra.GDB is a worm that steals confidential information related to a certain banking entity from Brazil.

11/18: Mal/ObfJS-BO Attempts to Load Other Malware

Mal/ObfJS-BO attempts to load other malware from a browser.

11/18: QHosts-113 Trojan Modifies Windows Hosts File

QHosts-113 is a Trojan that modifies the Windows hosts file denying access to security vendor websites by redirecting it to local host IP.

11/18: Pidief.DE Trojan PDF File Exploits Adobe Flaw

Troj_Pidief.DE Trojan can be downloaded from malicious Web sites.

11/18: Dloadr-CAE Trojan Creates Registry Entry

Troj/Dloadr-CAE is a Trojan for the Windows platform.

11/18: Redlofs Worm Spreads to Certain C Drive Folders

W32.Redlofs is a worm that spreads by copying itself to certain folders on C.

11/18: Craban-Gen a Family of Banking Trojans

Troj/Craban-Gen is a family of banking Trojans.

11/18: Dwnldr-HKT Drops, Runs Code From Internet

Troj/Dwnldr-HKT attempts to download and run code from the internet, without the user’s permission.

11/18: Wow.VM Trojan Steals Gaming Information

Wow.VM is a Trojan that steals confidential information related to certain online games such as World of Warcraft.

Symantec CEO John Thompson to Step Down

UPDATED: Says 10 years at the helm is long enough.

McColo and the Difficulty of Fighting Spam

In a world full of spamming, phishing and other fraudulent behavior, even the most battle-tested spam investigators are hard-pressed to assess who’s to blame and who’s been framed.

2009 Salaries for IT Security Professionals

In contrast with the gloomy job market, salary levels for IT security professionals are holding up well.

11/17: Banker-EOK Trojan Contacts Remote Server

Troj/Banker-EOK is a Trojan for the Windows platform.

11/17: Dloadr-BZV Trojan Drops, Installs Additional Malware

Troj/Dloadr-BZV is a Trojan for the Windows platform.

11/17: Agent-IGV Trojan Copies Itself, Sets Registry Entries

Troj/Agent-IGV is a Trojan for the Windows platform.

11/17: ClckCsh-A Trojan Redirects Users to Website

Troj/ClckCsh-A Trojan will redirect users to a website offering ways to make lots of money.

11/17: Mal/TDSS-A Program Drops Rootkit Driver

Mal/TDSS-A is a program that exhibits characteristics unique to malware that typically drop a rootkit driver in (System)\drivers\tdss(letters).sys.

11/17: Rscan.gen Trojan Launches IE Process Upon Execution

Upon execution Rscan.gen Trojan launches an internet explorer process with a parameter that attempts to take advantage of un-patched versions of iexplore.exe.

11/17: Mal/ExpJS-E Program Drops Other Malicious Content

Mal/ExpJS-E is for malicious scripts that attempt to download other malicious content.

11/17: Dwnldr-HKR Trojan Drops, Runs Executable Files

Troj/Dwnldr-HKR is a Trojan for the Windows platform.

11/17: TR/Hijack.AE Trojan Drops Malicious Files, Steals Info

TR/Hijack.AE is a Trojan that downloads malicious files and steals information.

11/17: FakeAle-JW Trojan Creates Files When Installed

Troj/FakeAle-JW is a Trojan for the Windows platform.

Open Source Security: 50 Good Apps

Open source software for anti-spam, firewalls, forensics, encryption, log monitoring, passwords, and more.

Boosting Email and Web Security: Unified Messaging Platform

The majority of threats to the enterprise are now triggered by Web content, not email content, creating a vital need for a unified messaging platform in the battle against cyber-threats.

11/14: Lamzev.A Trojan Opens Back Door

Lamzev.A is a Trojan horse that opens a back door on the compromised computer.

11/14: Pidief.DN Trojan Attempts to Connect to Remote Site

Troj_Pidief.DN Trojan may be downloaded from remote sites by other malware.

11/14: FakeAV-GM Trojan Hits Windows

Troj/FakeAV-GM is a Trojan for the Windows platform.

11/14: Winemmen!inf Detects Infected Version of .Dll File

W32.Winemmem!inf is a detection for an infected version of %System%\winmm.dll.

11/14: HacDef-EJ Trojan Targets Windows Systems

Troj/HacDef-EJ is a Trojan for the Windows platform.

11/14: Renos-BN Trojan Install New Version of System File

Troj/Renos-BN is a Trojan for the Windows platform.

11/14: Cmjspy-AM Trojan Copies Itself, Creates File

Troj/Cmjspy-AM is a Trojan for the Windows platform.

11/14: FakeVir-HL a Windows Trojan

Troj/FakeVir-HL is a Trojan for the Windows platform.

11/14: Dload-EJ Downloader Trojan Creates Random Text File

Troj/Dload-EJ is a downloader Trojan for the Windows platform

11/14: BHO-IC DLL Trojan Creates Registry Entries

The Troj/BHO-IC DLL is registered as a COM object and Browser Helper Object (BHO) for Microsoft Internet Explorer.

11/14: SDBot-DNK Worm Creates Folders

W32/SDBot-DNK is an internet worm for the Windows platform.

Media Spotlight Scatters a Botnet Host

ISPs spring into action after a mainstream publication fingers a U.S. Web hosting company for its role in the global spam and malware epidemic.

11/14: Dwnldr-HKO Trojan Downloads Remote Files

Troj/Dwnldr-HKO is a Trojan for the windows platform.

11/13: Zlob-ARE Trojan Copies Itself, Creates Entry

Troj/Zlob-ARE is a Trojan for the Windows platform.

11/13: Mal/Zlob-AE a Malicious Browser Help Object

Mal/Zlob-AE is a malicious Browser Helper Object.

11/13: Lydra-AE Trojan Copies Itself

Troj/Lydra-AE is a Trojan for the Windows platform.

11/13: Autorun.worm Copies Itself to Disk Volume Roots

W32/Autorun.worm is a worm that attempts to copy itself to the root of any accessible disk volumes.

11/13: MDrop-BWU Trojan Creates FIles When Run

Troj/MDrop-BWU is a Trojan for the Windows platform.

11/13: Sigougou Worm Uses Weak Passwords to Spread

W32.Sigougou is a worm that spreads through mapped drives and network shares protected by weak passwords.

11/13: Agent.BVN Trojan Drops .DLL File

W32/Agent.BVN is a Trojan that arrives either as a file downloaded from remote sites by other malware or downloaded unknowingly by a user when visiting malicious web sites.

11/13: Trojan.Fakemess Displays a Fake Message

Trojan.Fakemess is a Trojan horse that displays a fake message.

11/13: Chir.B Worm Uses Own Engine to Drop Malicious File

W32/Chir.B is a worm that uses its own email engine to drop a malicious file.

11/12: Mal/ObfJS-BK JavaScript Exploits Flaws in Browser

Mal/ObfJS-BK is an obfuscated JavaScript within a web page that exploits vulnerabilities in the browser in order to infect the victim with malware.

11/12: DwnLdr-HKK Trojan Copies Itself, Creates Registry Entry

Troj/DwnLdr-HKK is a Trojan for the Windows platform.

11/12: AutoRun-NZ Worm Spreads Via Removable Shared Drives

W32/AutoRun-NZ is a worm for the Windows platform.

11/12: FakeAV-GI Trojan Creates Files, Registry Entries

Troj/FakeAV-GI is a Trojan for the Windows platform.

11/12: BHO-HZ Trojan Register as COM Object and BHO for IE

Troj/BHO-HZ is a Trojan for the Windows platform.

11/12: CmjSpy-AK Trojan Creates Registry Entries

Troj/CmjSpy-AK is a Trojan for the Windows platform.

11/12: AntiMaware2009 Trojan Drops Files in Program Folder

W32/AntiMalware2009 is a Trojan that will infect Windows systems.

11/12: PDFJs-E PDF File Exploits Flaw

Troj/PDFJs-E is a PDF file that attempts to exploit a vulnerability associated with some versions of Adobe Reader in order to execute shell code when the PDF file is opened for viewing.

11/12: FakeAV-GJ Trojan Copies Itself, Creates Files

Troj/FakeAV-GJ is a Trojan for the Windows platform.

11/12: PWS-AVZ a Password-Stealing Trojan

Troj/PWS-AVZ is a password-stealing Trojan for the Windows platform.

11/11: SWF_Exploit.CS a Malicious Adobe Flash File

SWF_Exploit.CS is a malicious Adobe Flash file that may be downloaded from remote sites by other malware.

11/11: Magania.AIUQ Trojan May Be Downloaded Unknowingly

W32/Magania.AIUQ is a Trojan that will infect Windows systems.

11/11: SWF_Exploit.CR a Malicious SWF Object

SWF_Exploit.CR is a malicious SWF object.

11/11: WinCE.Pmcryptic.A Worm Copies Itself to Mobile Devices

WinCE.Pmcryptic.A is a worm that spreads by copying itself to memory cards on compromised mobile devices.

11/11: PSW-FY a Windows Trojan

Troj/PSW-FY is a Trojan for the Windows platform.

11/11: Exploit-PDF.b Disguised as PDF Document

Exploit-PDF.b is a recent variant was discovered disguised as a PDF document using the filenames data.pdf and info.pdf.

11/11: PSW-FX Trojan Hits Windows

Troj/PSW-FX is a Trojan for the Windows platform.

11/11: Agent-IFH Trojan Creates Registry Entry

Troj/Agent-IFH is a Trojan for the Windows platform.

11/11: AutoRun-OD Worm Copies Itself to Spread

W32/AutoRun-OD is a worm for the Windows platform.

11/11: FakeAV-GG Trojan Installs Antivirus Files

Troj/FakeAV-GG is a Trojan for the Windows platform.

11/11: Mal/Emogen-N a Malicious Windows Program

Mal/Emogen-N is a malicious program for the Windows platform.

11/11: Redir-C an HTML-Based JavaScript

Troj/Redir-C is an HTML-based JavaScript that redirects the current page to a different URL.

11/11: Trojan.Knowedel Modifies .Dll File For Malicious Purposes

Trojan.Knowedel is a Trojan horse that modifies advapi32.dll in order to perform malicious activities on the compromised computer.

11/11: PWS-AVX a Password-Stealing Trojan

Troj/PWS-AVX is a password-stealing Trojan for the Windows platform.

11/10: Sality.ag a Parasitic Virus Infecting PE Executables

W32/Sality.aq is a parasitic virus that infects Win32 PE executable files.

11/10: Keylog-KU Keylogging Trojan Disables System Tools

Troj/Keylog-KU is a keylogging Trojan for the Windows platform.

11/10: Mal/Mourn-A Program Displays Worm Characteristics

Mal/Mourn-A is a program that displays characteristics of a family of worms, which spread by copying themselves to removable devices.

11/10: Banker-EOD Trojan Hits Windows

Troj/Banker-EOD is a Trojan for the Windows platform.

11/10: Infostealer.Keylog.KU Trojan Lowers Security Settings

Infostealer.Keylog.KU is a Trojan horse that gathers confidential information and may lower security settings.

11/10: Invo-Zip a Family of Malware-Containing Zip Files

Troj/Invo-Zip is a family of zip files that contain malware.

11/10: Pidief.CB Trojan May be Downloaded From Remote Sites

Troj_Pidief.CB Trojan may be downloaded from certain remote sites.

11/10: SWF_Explopit.CR a Malicious SWF Object

SWF_Explopit.CR is a malicious SWF object.

New Tools to Battle the Sinowal Trojan

A new sheriff's in town, and it's taking on the most pernicious Trojan around.

11/7: Spyforms.BQ Trojan Controls Network Traffic to Get Passwords

Spyforms.BQ is a Trojan that is designed to control the network traffic in order to obtain passwords from ftp, icq, pop3 and imap connections.

11/7: Gaut.A Worm Spreads Via IM Clients

W32.Gaut.A is a worm that spreads through instant messaging clients.

11/7: SdBot.GKD Trojan Drops .Exe File in Windows Folder

W32/SdBot.GKD is a Windows Trojan that may be dropped by other malware or may be downloaded from remote website by other malware.

11/7: PHP/WPTrojan.b a Modified, "Trojanized' PHP Script File

PHP/WPTrojan.b is modified PHP script file from WordPress 2.6.4 that was ‘trojanized’ to allow remote code inclusion and execution.

11/7: Agent-IEB Trojan Creates Registry Entry

Troj/Agent-IEB is a Trojan for the Windows platform.

11/7: Agent-IEC a Multi-Component Windows Trojan

Troj/Agent-IEC is a multi-component Trojan for the Windows platform.

11/7: FakeAV Trojan a Fraudulent Anti-Virus Program

Troj/FakeAV-GC is a fraudulent anti-virus program.

11/7: VBS/IETitle.C a VBS Script Virus

VBS/IETitle.C is a VBS script virus.

11/7: Autorun-NU Worm Spreads to Other Network Systems

W32/Autorun-NU is a worm for the Windows platform that spreads to other network computers.

11/6: Zlob-AQO Trojan Contacts Remote Server Via Http

Troj/Zlob-AQO is a Trojan for the Windows platform.

11/6: Banker-LLN Trojan Steals Confidential Information

Banker.LLN is a Trojan that steals confidential information related to a certain banking entity from Peru, redirecting users to a fake website that imitates the original one, in order to steal the data entered in it.

11/6: Mal/FakeAV-L Program Displays Fake Threat Alerts

Mal/FakeAV-L is a program that exhibits characteristics unique to malware that pretend to be Anti-Virus programs that display fake threat alerts on the user's computer.

Spammers Latch on to Obama Victory

We may be ready for change, but the spammers are readier.

11/6: OnLineGames.STFF Trojan Drops .Dll Files

W32/OnLineGames.STFF is a Trojan that may be dropped by other malware or may be downloaded from remote website by other malware.

11/6: Sality.aq Parasitic Virus Infects PE Executable Files

W32/Sality.aq is a parasitic virus that infects Win32 PE executable files.

10/6: FakeAV-GB Trojan is Fraudulent Anti-Spyware Software

Troj/FakeAV-GB is fraudulent anti-spyware software.

11/6: JSRedir-C Malicious Script Redirects Users

Troj/JSRedir-C is a malicious script embedded within a web page that attempts to redirect the user to a remote site.

11/6: JSRedir-B Trojan Script Embedded in Web Pages

Troj/JSRedir-B is a script embedded within web pages that redirects the user to another malicious web page.

11/6: Dload-EG Trojan Copies Itself, Creates Files

Troj/Dload-EG is a Trojan for the Windows platform.

11/5: Dloadr-BYE a Downloader Trojan

Troj/Dloadr-BYE is a downloader Trojan for the Windows platform.

11/5: Exploit-PDF.d Trojan Detects Malicious PDF Documents

Exploit-PDF.d is a detection for malicious Trojan PDF documents that try to exploit a vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier versions.

11/5: Downloader.UYD Trojan Drops Malware Samples

Downloader.UYD is a Trojan that is designed to download many samples of malware to the affected computer from a certain website.

11/5: Trojan.Newarxy Acts as Proxy Server on Compromised System

Trojan.Newarxy is a Trojan horse that acts as a proxy server on the compromised computer.

11/5: PHP/C99Shell-B Trojan Targets Platforms With PHP Support

PHP/C99Shell-B is a backdoor Trojan for platforms with PHP support, such as web servers.

11/5: Dloadr-BYF Trojan Hits Windows

Troj/Dloadr-BYF is a downloader Trojan for the Windows platform.

11/5: Kerbot.A Worm Creates Registry Key/Entry, Exploits Flaws

Worm_Kerbot.A may be dropped by other malware. It may be downloaded from certain remote sites.

11/5: Vaklik.ARK Trojan Drops .Exe, .Dll Files

W32/Vaklik.ARK is a Windows systems Trojan that may be dropped by other malware or may be downloaded from remote website by other malware.

11/5: Kango-F Trojan Copies Itself, Creates File

Troj/Kango-F is a Trojan for the Windows platform.

Spammers Hit MobileMe, Google Blogspots

They're taking aim at CAPTCHA and seeking new means of attacking their targets.

11/5: Agent.ARQB Worm Uses Own SMTP Engine to Send Emails

Worm_Agent.ARQB arrives as attachment to email messages spammed by another malware or a malicious user.

11/5: Wecorl.A Worm Drops, Downloads Multiple Malicious Files

Worm_Wecorl.A may be dropped or downloaded by other malware.

11/5: Zlob-AQL Trojan Creates File, Registry Entry

Troj/Zlob-AQL is a Trojan for the Windows platform.

11/5: Dloader.ISZ Trojan May be Unknowingly Downloaded

Troj_Dloader.ISZ Trojan may be downloaded unknowingly by a user when visiting malicious Web sites.

11/4: Trojan.Farfli!Sp Detection for FarFli Trojan Family

Trojan.Farfli!SP is a generic detection for variants of the Trojan.Farfli family of Trojans.

11/4: BadCab-A Trojan Detects Microsoft CABSfx

Troj/BadCab-A Trojan detects a modified Microsoft CABSfx (Self-extracting archive), which is attempting to evade security software.

11/4: Wecorl Worm Exploits Server Service Flaw

W32/Wecorl is a worm that spreads itself by exploiting a vulnerability in Server Service (ms08-067).

11/4: Autorun.CPQ an Email Worm

W32/Autorun.CPQ is an email worm that will infect Windows systems and spread through email.

11/4: Kerbot Trojan Links to Remote Sites

Kerbot is a downloading Trojan that has been observed as a result of Exploit-MS08-067.

11/4: Dloadr-BYB Trojan Contacts Remote Server Via Http

Troj/Dloadr-BYB is a Trojan for the Windows platform.

11/4: Notong.A Virus Spreads By Infecting Executables

W32.Notong.A is a virus that spreads by infecting executable files.

11/4: FakeAlert.GU Trojan Drops More Rogue Software

Win32/FakeAlert.GU is a Trojan that communicates with a web server to report its activities and download additional rogue software.

11/4: Gimmiv-Gen Trojan Family Drops Files

Troj/Gimmiv-Gen is a family of Trojans for the Windows platform.

11/3: Arinj-Fam Trojan Family Inject Code Into Running Processes

Troj/Arinj-Fam is a family of Trojans for the Windows platform.

11/3: Busky.EI Trojan May Be Dropped, Downloaded

W32/Busky.EI is a Trojan that may be dropped by other malware or may be downloaded from remote website by other malware.

11/3: BHO-FY Trojan Downloads File From Preconfigured URL

Troj/BHO-FY is a Trojan for the Windows platform.

11/3: StealthMBR a Master Boot-Infecting Trojan

StealthMBR is a Master Boot Record (MBR) -infecting Trojan. It infects the Master Boot Record on the system hard disk.

11/3: Bredo-Family of Trojan Decrypt, Run More Executables

Troj/Bredol-Fam is a family of Trojans for the Windows platform that attempt to decrypt and run further executable files.

11/3: Wecorl Worm Exploits Windows Server Flaw

W32.Wecorl is a worm that spreads by exploiting the Microsoft Windows Server Service RPC Handling Remote Code Execution Vulnerability (BID 31874).

1/3: FakeAle-JK Trojan Displays Fake Virus Infection Messages

When installed Troj/FakeAle-JK displays fake spyware infection messages.

Yahoo, Microsoft Ally to Tackle Lottery Scams

With the threat of online scams rising as economic woes worsen, the two look to clamp down on e-mail lottery hoaxes.

RSA Cracks Down on Legendary Sinowal Trojan

Several financial institutions hit by the professionally maintained Trojan.

11/3: Trojan.Mobiregect Drops Other Risks

Trojan.Mobiregect is a Trojan horse that downloads other risks onto the compromised computer.

11/3: Kernelbot.A Worm Exploits Windows Server Flaw

W32.Kernelbot.A is a worm that spreads by exploiting the Microsoft Windows Server Service RPC Handling Remote Code Execution Vulnerability (BID 31874).

11/3: Dloadr-BXX Trojan Creates Tasks to Run Every Hour

Troj/Dloadr-BXX creates 24 scheduled tasks named at1 to 24 to run itself every hour.