MWBLOG.ORG

Virus Malware and Threat News for 20080928

Generic.dx!24F052AC

- Generic.dx!24F052AC at McAfee

File PropertyProperty ValueFileNameisbcmzjj.exeMcAfee DetectionGeneric.dxLength22,016
bytesCRC24F052ACMD5E62B1477739CEF0BD16014B92475D363SHA13353A277A737F7C575C1E66EF99AE7C63366E551Other Common
Detection AliasesCompany NameDetection NameavastWin32:Trojan-gen {Other}AVG (GriSoft)sheur.
ckulBitDefenderPacker.Malware.Lighty.FmicrosoftTro...

Generic BackDoor!57F5302C

- Generic BackDoor!57F5302C at McAfee

File PropertyProperty ValueFileNamepvwwxk.exeMcAfee DetectionGeneric BackDoorLength96,768
bytesCRC57F5302CMD552DDD8B95718A1912045ED9D17EAF002SHA18BC7CC133AA62BCA2D3D23FAA92240FD04178925Other Common
Detection AliasesCompany NameDetection NameahnlabWin-Trojan/Agent.96768.AEavastWin32:Trojan-gen {Other}AVG
(GriSoft)backdoor.agent.utcAvi...

Generic FakeAlert.d.dr!6B9E4C53

- Generic FakeAlert.d.dr!6B9E4C53 at McAfee

File PropertyProperty ValueFileNamee-card.exeMcAfee DetectionGeneric FakeAlert.d.drLength454,656
bytesCRC6B9E4C53MD5F031B18A0512DF766C96A1EC924D216FSHA154996616C9B77160DC2AFEA89951D1434FF25418Other Common
Detection AliasesCompany NameDetection NameAVG (GriSoft)downloader.zlob.acvdBitDefenderTrojan.Crypt.gcEseta
variant of Win32/Troja...

W32/Sality!1FDCABD4

- W32/Sality!1FDCABD4 at McAfee

File PropertyProperty ValueFileNameicesword.exeMcAfee DetectionW32/SalityLength766,464
bytesCRC1FDCABD4MD515859CA9C9366C768342F0C03C7983D6SHA14BF6A81463F9D553011CF7B9384D7A1B83712C10Other Common
Detection AliasesCompany NameDetection NameavastWin32:Sality-genBitDefenderWin32.Sality.OGEseta variant of
Win32/Sality.NARF-ProtW32/Sality....

PWS-OnlineGames.cn!CD6D7D5C

- PWS-OnlineGames.cn!CD6D7D5C at McAfee

File PropertyProperty ValueFileNamezz.exeMcAfee DetectionPWS-OnlineGames.cnLength127,488
bytesCRCCD6D7D5CMD59C2152A1E875A73070A02F07A88EC709SHA1D6E244C2F58B66DFCAE43597EE972C9DF155CB06Other Common
Detection AliasesCompany NameDetection NameAviraTR/Crypt.XPACK.GenBitDefenderTrojan.Dropper.Onlinegames.
AYeSafe (Alladin)Suspicious File [...

Tibs-Packed!92F13BA7

- Tibs-Packed!92F13BA7 at McAfee

File PropertyProperty ValueFileName100_11~1.exeMcAfee DetectionTibs-PackedLength27,136
bytesCRC92F13BA7MD56BEDAA6A025545C34B93C9168D9DAD59SHA13EB27B99EDD231C76BB8FE21507B28793194D327Other Common
Detection AliasesCompany NameDetection NameAVG (GriSoft)I-Worm/Nuwar.XAviraWORM/Zhelatin.GenBitDefenderTrojan.
Agent.AKFFeSafe (Alladin)Suspi...

Tibs-Packed!F2FE37E6

- Tibs-Packed!F2FE37E6 at McAfee

File PropertyProperty ValueFileName100_11~1.exeMcAfee DetectionTibs-PackedLength27,136
bytesCRCF2FE37E6MD54B01FBC5E446DA05AF21B802D038FC9ESHA1922789A2AC07A0A79195B81744839E2FC2C28A48Other Common
Detection AliasesCompany NameDetection NameAVG (GriSoft)i-worm/nuwar.xAviraWORM/Zhelatin.GenBitDefenderTrojan.
Agent.AKFFeSafe (Alladin)Suspi...

Generic BackDoor!618090BD

- Generic BackDoor!618090BD at McAfee

File PropertyProperty ValueFileNameyurc.exeMcAfee DetectionGeneric BackDoorLength25,088
bytesCRC618090BDMD5F7924822B86AAFE817EB4A6B0E629B1ESHA10092697A3674C3394BC21C824F7D66C2D29234F1Other Common
Detection AliasesCompany NameDetection NameavastWin32:Frauder-F [Trj]AVG (GriSoft)BackDoor.Generic10.
IRGAviraTR/Crypt.XPACK.GenBitDefenderT...

Generic PUP.x!FAF0FDF4

- Generic PUP.x!FAF0FDF4 at McAfee

This software is not a virus or a Trojan. It is detected as a "potentially unwanted program" (PUP). PUPs are
any piece of software that a reasonably security- or privacy-minded computer user may want to be informed of
and, in some cases, remove. PUPs are often made by a legitimate corporate entity for some beneficial purpose,
but th...

Generic PUP.x!C6FA9E92

- Generic PUP.x!C6FA9E92 at McAfee

This software is not a virus or a Trojan. It is detected as a "potentially unwanted program" (PUP). PUPs are
any piece of software that a reasonably security- or privacy-minded computer user may want to be informed of
and, in some cases, remove. PUPs are often made by a legitimate corporate entity for some beneficial purpose,
but th...

Generic BackDoor!6BCB3C3C

- Generic BackDoor!6BCB3C3C at McAfee

File PropertyProperty ValueFileNameyure.exeMcAfee DetectionGeneric BackDoorLength24,064
bytesCRC6BCB3C3CMD556B2489252E4B70544E16308BBB8B5ABSHA1C856918FF747F6ADBD30444962EF0A25F3978A94Other Common
Detection AliasesCompany NameDetection NameavastWin32:Frauder-F [Trj]AVG (GriSoft)BackDoor.Generic10.
IRJAviraTR/Crypt.XPACK.GenBitDefenderT...

Troj/Dloadr-BTZ

- Troj/Dloadr-BTZ at Sophos

...

Troj/Dropr-AG

- Troj/Dropr-AG at Sophos

...

Troj/Agent-HTO

- Troj/Agent-HTO at Sophos

...

Troj/Agent-HTN

- Troj/Agent-HTN at Sophos

...

Troj/Banhost-Z

- Troj/Banhost-Z at Sophos

Troj/Banhost-Z alters the file <System>\Drivers\etc\hosts so that attempts to visit banking
websites will be redirected to another server.
...

Troj/Dropr-AH

- Troj/Dropr-AH at Sophos

Troj/Dropr-AH is a Trojan for the Windows platform. When first run
Troj/Dropr-AH copies itself to <Windows>\service.exe. The following registry
entry is created to run service.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ...

Troj/Geezo-E

- Troj/Geezo-E at Sophos

Troj/Geezo-E is a Trojan for the Windows platform. When Troj/Geezo-E is
installed it creates the file <System>\comsa32.sys.
...