Malware: Archive: November 2009

11/30: Packed.Generic.271 Targets Encrypted Files

Packed.Generic.271 is a heuristic detection for files that may have been obfuscated or encrypted in order to conceal them from antivirus software.

11/25: Bloodhound.Exploit.286 is Heuristic Detection

Bloodhound.Exploit.286 is a heuristic detection for files attempting to exploit the Microsoft Internet Explorer 'Style' Object Remote Code Execution Vulnerability.

11/24: Suspicious.Stealers Detects Without Sigs

Suspicious.Stealers is a detection technology designed to detect entirely new malware threats without traditional signatures. This technology is aimed at detecting malicious software that has been intentionally mutated or morphed by attackers.

11/23: iPhoneOS.Ikee.B Spreads on Jailbroken iPhones

iPhoneOS.Ikee.B is a worm that spreads through jailbroken iPhones by using the default SSH password.

11/23: W32.Pykspa.E Spreads via Skype IM

W32.Pykspa.E is a worm that spreads through Skype Instant Messenger and sends confidential information to a remote location.

2009's Malware May Reveal 2010's Threats

In 2009, new malware mechanisms have emerged and platforms beyond Windows have increasingly been targeted.

11/19: TROJ_DELPACK.A Registers as a Browser Helper Object

This trojan registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run.

11/18: Packed.Generic.269 Targets Encrypted Files

Packed.Generic.269 is a heuristic detection for files that may have been obfuscated or encrypted in order to conceal them from antivirus software.

Two Approaches to Securing Autorun and AutoPlay in Windows

Protecting your Windows computer from Autorun/Autoplay security problems can be done the 'official' way -- or the safe way.

11/17: Backdoor.Bapkri Detects DLL Files

Backdoor.Bapkri is a generic detection for Dynamic Link Library (.dll) files that encrypt data to avoid detection and opens a back door to on the compromised computer.

IBM's Virtual Server Security: 'Every Layer'

IBM newly released Virtual Server Security for VMware vSphere touts its protection of the entire infrastructure, from the hypervisor to server-based virtual desktops.

11/16: Troj/Zbot-JS Hides Spying Malware

Troj/Zbot-JS is a member of the Zbot family of malware, also known as Zeus. It is aggressively spammed out in multiple campaigns with various social engineering lures.

11/13: Trojan.Avalanec Opens Back Door

Trojan.Avalanec is a Trojan horse that opens a back door on the compromised computer.

11/12: W32.SillyFDC.BDE Targets Removable Drives

W32.SillyFDC.BDE is a worm that spreads by copying itself to removable drives. It may also download files on to the compromised computer.

11/11: W32.Gosys Spreads through Network Shares

W32.Gosys is a worm that spreads through network shares. It also opens a back door on the compromised computer.

11/10: Backdoor.Pfinet Steals Confidential Data

Backdoor.Pfinet is a Trojan horse that opens a back door on the compromised computer and may steal confidential information.

11/9: Troj/Agent-LNW is Fake Anti-virus

Troj/Agent-LNW is an emailed fake anti-virus infector. It is distributed as an attachment to a spam message that attempts to convince users to agree to the terms of an imaginary contract.

11/6: Packed.Generic.267 Targets Obfuscated Files

Packed.Generic.267 is a heuristic detection for files that may have been obfuscated or encrypted in order to conceal them from antivirus software.

Check (All) Your Windows Patches: Secunia

Microsoft issues patches for its own Windows apps, yet other vendors' programs remain a security challenge. Secunia offers a free online software inspector for patch notification.

11/5: Troj/Psyme-KS Exploits IE Vulnerability

This Trojan typically arrives in spam messages, typically about an unreleased Michael Jackson song or a September 11 conspiracy theory.

Kaspersky Unveils Anti-Virus for Mac

As the Mac platform attracts more hackers, security vendors respond in kind.

11/4: W32.Akannuna Infects .exe Files

W32.Akannuna is a virus that infects .exe files.

Malware is Top Threat to Company PCs

A Microsoft report indicates that the threat of rogue security software is lessening, yet it remains a leading challenge to corporate PCs.

11/3: OSX.Loosemaque Trojan Appears as Video Game

OSX.Loosemaque is a Trojan horse that appears to be a video game, but deletes files from the home folder when a user plays it.

11/2: Trojan.Whitewell Opens Back Door on Hacked PC

Trojan.Whitewell is a Trojan horse that opens a back door on the compromised computer.