Malware: Archive: August 2009

Trojan Attacks Skype on Windows

Trojan.Peskyspy defeats Skype encryption by exploiting a Windows API. The vulnerability's level of danger is unclear.

8/31: TotalSecurity Gives Exaggerated Threat Reports

TotalSecurity is a misleading application that may give exaggerated reports of threats on the computer.

8/28: JS/Agent-KZF is Windows Malware

JS/Agent-KZF is Windows malware.

8/27: Packed.Generic.248 Detects Encrypted Files

Packed.Generic.248 is a heuristic detection for files that may have been obfuscated or encrypted in order to conceal them from antivirus software.

8/27: W32.Nitomeivo Infects Executable Files

W32.Nitomeivo is a virus that infects executable files and may overwrite files on the compromised computer.

8/26: Win32/Induc.A is a Windows Virus

Win32/Induc.A is a Windows virus.

8/25: Troj/Bckdr-QXN is a Windows Trojan

Troj/Bckdr-QXN is a Windows Trojan.

8/25: Packed.Generic.248 is Heuristic Detection

Packed.Generic.248 is a heuristic detection for files that may have been obfuscated or encrypted in order to conceal them from antivirus software.

8/24: JS.Frienren Spreads via Social Networking Site

JS.Frienren is a worm that spreads through the Renren social networking Web site.

8/24: VBS.Runauto.G Spreads via Removable Drives

VBS.Runauto.G is a worm that spreads through removable drives and network shares. The worm also opens a back door on the compromised computer.

8/21: W32.Induc.A!dr Detects Infected Programs

W32.Induc.A!dr is a detection for programs that install Delphi-compiled applications infected with W32.Induc.A.

8/20: Adware.DoubleD Displays Out-of-Context Ads

Adware.DoubleD is an adware program that displays out-of-context advertisements.

8/20: Mal/ObfJS-CG is Malicious JavaScript

Mal/ObfJS-CF is a malicious JavaScript embedded in a web page.

Smartphone Users Oblivious to Security

The operative mode of smartphone users seems to be, Security? What security?

8/19: W32.Induc.A!dcu Detects Malicious Delphi Library File

W32.Induc.A!dcu is a detection for a malicious Delphi library file that is created by W32.Induc.A.

8/18: RegDefense is Misleading App

RegDefense is a misleading application that may give exaggerated reports of errors on the computer.

8/17: Bloodhound.PDF.16 May Exploit Adobe Acrobat

Bloodhound.PDF.16 is a generic detection of potentially malicious PDF files, which may exploit a vulnerability in Adobe Acrobat in order to perform further malicious actions.

8/17: Bloodhound.Exploit.267 is Heuristic Detection

Bloodhound.Exploit.267 is a heuristic detection for files attempting to exploit the Microsoft Remote Desktop Connection ActiveX Control Heap Based Buffer Overflow Vulnerability (BID 35973).

8/14: Downloader.Sninfs is Trojan Horse

Downloader.Sninfs is a Trojan horse that may download files on to the compromised computer.

New Viruses Target Craigslist, AutoCAD

A common ploy uses spam promising a good deal on an automobile.

8/13: W32.Screentief Captures Screenshots

W32.Screentief is a worm that spreads by copying itself to removable drives. It also captures screenshots and attempts to send them to a remote attacker.

8/13: W32.Trats.B!inf Detects Files Infected by W32.Trats.B

W32.Trats.B!inf is a detection for files that are infected by the W32.Trats.B.

8/12: Hacktool.PStorRevealer Gathers Passwords

Hacktool.PStorRevealer is a hack tool that gathers passwords from stored in various applications.

8/10: W32.Feeb is File Infector

W32.Feeb is a file infector that may attempt to spread by copying itself to removable drives and shared folders.

8/10: W32.SillyFDC.BCS Copies Itself to Removable Drives

W32.SillyFDC.BCS is a worm that spreads by copying itself to removable drives.

Top Security Concern: Email Violations

Even more than the growing threat from malware-infested social media, e-mail security is causing big headaches at many businesses.

8/6: Backdoor.Regdor Opens a Back Door

Backdoor.Regdor is a Trojan horse that opens a back door on the compromised computer.

8/5: 007AntiSpyware May Give Exaggerated Reports

007AntiSpyware is a misleading application that may give exaggerated reports of threats on the computer.

8/5: Mal/ObfJS-CD uses JavaScript Within a Web Page

Mal/ObfJS-CD is a malicious JavaScript within a web page.

8/3: Bloodhound.Exploit.266 is Heuristic Detection

Bloodhound.Exploit.266 is a heuristic detection for files attempting to exploit the Adobe Acrobat, Reader, and Flash Player Remote Code Execution Vulnerability.

IT Security vs. Mobile, Social Networks

Security experts discuss how today's mobile usage and social networks pose a major challenge to IT security.