Virus Malware and Threat News for 20080331
W32/Sdbot.worm!3D1ACE0E - W32/Sdbot.worm!3D1ACE0E at McAfee
W32/Sdbot.worm!3D1ACE0E will connect to IRC server and scan the local LAN at port 445 to exploit other
vulnerable machines.The following possible URLs are accessed:dave.own.ccpoweronline.us:2345 (84.244.11.26)rusk.
nswebhost.com:80 tap.tronko.netserv-5-19-254.lycos-vds.com:2345 (84.244.19.254)serv-5-19-183.lycos-vds.com:
2345 (84.244.1...
Troj/Agent-GUO - Troj/Agent-GUO at Sophos
Troj/Agent-GUO is a Trojan for the Windows platform. When first run
Troj/Agent-GUO copies itself to <Windows>\help\F3C74E3FA248.exe and creates the following file:
<Windows>\help\F3C74E3FA248.dll The file F3C74E3FA248.dll is
detected as Mal/L...
Troj/PhpShell-G - Troj/PhpShell-G at Sophos
Troj/PhpShell-G is a backdoor Trojan for platforms supporting PHP.
Troj/PhpShell-G contains the following functionality: - reports the capabilities of the
PHP interpreter - discover database functions available to the current PHP install -
server IP addre...
Troj/PhpShell-H - Troj/PhpShell-H at Sophos
...
Troj/PhpShell-I - Troj/PhpShell-I at Sophos
...
Troj/PhpShell-J - Troj/PhpShell-J at Sophos
...
Troj/PhpShell-K - Troj/PhpShell-K at Sophos
...
Troj/PhpShell-L - Troj/PhpShell-L at Sophos
...
Troj/Zlob-AJN - Troj/Zlob-AJN at Sophos
...
Troj/Bifrose-VR - Troj/Bifrose-VR at Sophos
...
Troj/Starter-I - Troj/Starter-I at Sophos
...
0 writebacks [03/31/2008 05:42]
[]
permanent link
|
