Malware: Archive: June 2009

6/30: W32.SillyFDC.BCD Copies Itself to Removable Drives

W32.SillyFDC.BCD is a worm that spreads by copying itself to removable drives.

6/30: W32.Ackantta.F@mm is Mass-mailing Worm

W32.Ackantta.F@mm is a mass-mailing worm that spreads through removable drives and sends an email that contains an attachment of itself. It may also download potentially malicious files from the Internet.

Michael Jackson Malware: No 'Thriller'

Michael Jackson's death has predictably prompted fraudsters to create malware to lure unsuspecting users.

Facebook Sees Rise in Cybercrime

Facebook users are suffering a wave of attacks by criminals who realize the platform hosts many overly trusting participants.

6/29: Bloodhound.Exploit.257 is Heuristic Detection

Bloodhound.Exploit.257 is a heuristic detection for potentially malicious files that may exploit vulnerabilities in order to perform further malicious actions.

Industry Summit: "Security Become 'Less Human Intensive'"

A conference hosted by research firm Gartner suggests that cybersecurity tasks will be so integrated into the tech infrastructure that it will require less human intervention.

6/29: VBS.Sasan Copies to Other Drives

VBS.Sasan is a worm that spreads by copying itself to other drives.

6/26: OSX_JAHLAV.B is OS X Malware

OSX_JAHLAV.B arrives as ActiveXsetup.dmg, which is a MAC OS X mountable Disk Image file. It contains a .PKG file which contains its malicious script and its component files.

6/26: Suspicious.Graybird.1 uses Detection Technology

Suspicious.Graybird.1 is a detection technology designed to detect entirely new malware threats without traditional signatures. This technology is aimed at detecting malicious software that has been intentionally mutated or morphed by attackers.

6/25: W32.SillyFDC.BCC Copies Itself to Removable and Mapped Drives

W32.SillyFDC.BCC is a worm that spreads by copying itself to removable and mapped drives.

Is Whitelisting as Safe as Antivirus?

Security industry experts aren't in full agreement about about the benefits of whitelisting versus antivirus software.

6/25: AntivirusAgentPro is Misleading App

AntivirusAgentPro is a misleading application that may give exaggerated reports of threats on the computer.

6/24: Packed.Generic.238 is Heuristic Detection

Packed.Generic.238 is a heuristic detection for files that may have been obfuscated or encrypted in order to conceal them from antivirus software.

6/24: IACommand is Remote Access App

IACommand is a program that may be installed as part of a remote access application.

6/23: Trojan.Spadenf Sends Spam

Trojan.Spadenf is a Trojan horse that downloads files and sends spam emails from the compromised computer.

6/23: ErrorFix Exaggerates Threat Reports

ErrorFix is a misleading application that may give exaggerated reports of threats on the computer.

Microsoft Anti-Malware Beta to Launch

Microsoft is ready to unveil public beta testing of its free anti-malware engine.

6/22: Bloodhound.Exploit.244

Bloodhound.Exploit.244 is a heuristic detection for files attempting to exploit the Microsoft DirectX DirectShow QuickTime Video Remote Code Execution Vulnerability (BID 35139).

6/22: Troj/Agent-KGG is Windows Trojan

Troj/Agent-KGG is Windows Trojan.

New Twitter Worm Attacks

Security vendor Symantec warns of yet another worm attack on Twitter.

6/19: Bloodhound.Exploit.256 is Heuristic Detection

Bloodhound.Exploit.256 is a heuristic detection for files attempting to exploit the Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities (BID 32608).

6/19: Troj/DwnLdr-HTJ Sets a Registry Entry

Troj/DwnLdr-HTJ is a Trojan for the Windows platform. When run Troj/DwnLdr-HTJ creates a file \reset5c.dll (detected as Troj/DwnLdr-HTJ) and a registry entry.

6/18: Bloodhound.PDF.15 Detects Encrypted Files

Bloodhound.PDF.15 is a heuristic detection for files that may have been obfuscated or encrypted in order to conceal them from antivirus software.

6/18: Bloodhound.Exploit.250 is a Heuristic Detection

Bloodhound.Exploit.250 is a heuristic detection for files attempting to exploit the Microsoft Excel Field Sanitization Remote Code Execution Vulnerability.

6/17: Troj/Agent-KEV Set Registry Entries

Troj/Agent-KEV is a Trojan for the Windows platform that sets registry entries.

6/17: Suspicious.S.Vundo.3 is Detection Technology

Suspicious.S.Vundo.3 is a detection technology designed to detect entirely new malware threats without traditional signatures. This technology is aimed at detecting malicious software that has been intentionally mutated or morphed by attackers.

How to Remove Malware (Part 2): Booting from a CD

Using a boot CD to remove malware can be more effective than simply running an anti-malware software program.

6/16: Trojan.Amoevae Exploits Windows Vulnerability

Trojan.Amoevae is a Trojan horse that exploits the Microsoft DirectX DirectShow QuickTime Video Remote Code Execution Vulnerability (BID 35139) to execute arbitrary code and download files on to the compromised computer.

Dasient: Servers Need Anti-Malware

Virtually all data loss occurs on servers. A new company releases a pubic beta for anti-malware.

6/15: VBS.Mutafrog!inf is a Detection for Infected Files

VBS.Mutafrog!inf is a detection for files infected with code that infects files and drops more malware on to the compromised computer.

Mac OS Sees More Malware

Although Macs still face far fewer security problems than Windows, the trend line is going in the wrong direction.

6/12: Downloader.Lapurd May Download Files

Downloader.Lapurd is a Trojan horse that may download files on to the compromised computer.

6/12: W32.SillyFDC.BBT Spreads by Copying Itself

W32.SillyFDC.BBT is a worm that spreads by copying itself to removable and mapped drives.

Adobe Issues Critical Patch for Reader and Acrobat

It's well worth upgrading your version of Adobe Acrobat and Reader.

6/10: Trojan.Iflar Sends Spam

Trojan.Iflar is a Trojan horse that sends email spam and gathers email addresses from the compromised computer.

6/10: Mal/Inject-P Drops and Executes Other Malware

Mal/Inject-P is a malicious program that drops and executes other malware.

6/10: Trojan.Cipevas Attempts to Steal Information

Trojan.Cipevas is a Trojan horse that attempts to steal information from the compromised computer.

6/9: Mal/PDFEx-F is PDF with Malware

Mal/PDFEx-F is a PDF file which contains malicious JavaScript.

6/9: Trojan.Ransomcrypt Issues a Ransom Demand

Trojan.Ransomcrypt is a Trojan horse that encrypts certain documents on the compromised computer, then issues a ransom demand.

6/8: W32/AutoRun-AEO Changes Registries

W32/AutoRun-AEO changes registries on compromised PC's.

6/8: W32/BatAuto-C Copies Itself to Several Drives

W32/BatAuto-C will enumerate and copy itself to man of a PC's drives.

Microsoft Plans 6 'Critical' Patches For Tuesday

Redmond also says it has fixes in the works for Windows, Word and Excel.

6/4: Troj/Mdrop-CDA is Windows Trojan

Troj/Mdrop-CDA is a Windows Trojan.

Beware of Twitter Scareware

As you watch a video linked to from some social network sites, hackers are installing malware on your system.

6/2: Mal/Nuwar-A is Windows Worm

Mal/Nuwar-A is a worm for the Windows platform.

6/2: Mal/Sharbi-B is Windows Malware

Mal/Sharbi-B is Windows malware.

6/2: Troj/Delf-FCK is Low Prevalence Trojan

Troj/Delf-FCK is a low prevalence Trojan.

Windows XP Vulnerable to Malware Quicktime

If users click on a booby-trapped Quicktime file and perform a number of other actions, their system could be completely compromised.

Malware: Archive: June 2009

Topic Centers

Articles by Type

Contact Us

More Security