MWBLOG.ORG

Virus Malware and Threat News for 20080929

Packed.Generic.169

- Packed.Generic.169 at Norton Symantec

Packed.Generic.169 is a heuristic detection for files that may have been obfuscated or encrypted in order to
conceal them from antivirus software.
...

Packed.Generic.97

- Packed.Generic.97 at Norton Symantec

Packed.Generic.97 is a heuristic detection for files that may have been obfuscated or encrypted in order to
conceal them from antivirus software.
...

Packed.Generic.86

- Packed.Generic.86 at Norton Symantec

Packed.Generic.86 is a heuristic detection for files that may have been obfuscated or encrypted in order to
conceal them from antivirus software.
...

Packed.Generic.85

- Packed.Generic.85 at Norton Symantec

Packed.Generic.85 is a heuristic detection for files that may have been obfuscated or encrypted in order to
conceal them from antivirus software.
...

PWS-OnlineGames.cn!2B9CCF36

- PWS-OnlineGames.cn!2B9CCF36 at McAfee

File PropertyProperty ValueFileNamezz.exeMcAfee DetectionPWS-OnlineGames.cnLength125,440
bytesCRC2B9CCF36MD59CAA6F8CD4F57CB092B344CC899D3D6ASHA1E47F2475E264E1F478248E758812EA142C172D03Other Common
Detection AliasesCompany NameDetection NameAviraTR/Crypt.XPACK.GeneSafe (Alladin)Suspicious File
[100]F-Prot~W32/Vaklik.genmicrosoftPWS:Wi...

PWS-OnlineGames.bp!9A3E98C9

- PWS-OnlineGames.bp!9A3E98C9 at McAfee

File PropertyProperty ValueFileNamemicsusk.exeMcAfee DetectionPWS-OnlineGames.bpLength14,848
bytesCRC9A3E98C9MD5CB3BD85D57B05E92B9B7DBB3EE77C607SHA17D342F52D4A3D56BDB71E72456D7EC049EE572A7Other Common
Detection AliasesCompany NameDetection NameAVG (GriSoft)psw.onlinegames.bakxKasperskyTrojan-GameThief.Win32.
OnLineGames.tkoznormanw32/...

PWS-OnlineGames.x!20B76DBE

- PWS-OnlineGames.x!20B76DBE at McAfee

File PropertyProperty ValueFileName940477~1.exeMcAfee DetectionPWS-OnlineGames.xLength52,909
bytesCRC20B76DBEMD529D7E09DBC247E088F31BA38F8DC0203SHA15C40B2FB9F9F84D87E320E615404CB33F54A5A05Other Common
Detection AliasesCompany NameDetection NameavastWin32:Lmir-EZAVG (GriSoft)Win32/CryptExeAviraTR/ATRAPS.
GenBitDefenderTrojan.PWS.Online...

Generic FakeAlert.d!C08CC3C8

- Generic FakeAlert.d!C08CC3C8 at McAfee

File PropertyProperty ValueFileNameburitos.exeMcAfee DetectionGeneric FakeAlert.dLength9,216
bytesCRCC08CC3C8MD50099012BD499A5D33C16211DB56B0BCCSHA1B5F29608610A41BC8822B97D02CAA3009A030BADOther Common
Detection AliasesCompany NameDetection NameAVG (GriSoft)dropper.bravix.cKasperskyBackdoor.Win32.
UltimateDefender.genmicrosofttrojandow...

Generic Downloader.x!BEAB6A77

- Generic Downloader.x!BEAB6A77 at McAfee

File PropertyProperty ValueFileName0xf9.exeMcAfee DetectionGeneric Downloader.xLength20,480
bytesCRCBEAB6A77MD5C6722C1CC576E1570052DDC03032C44BSHA1718741BE90DCE0BA44C355E632B95805A986E2BEOther Common
Detection AliasesCompany NameDetection NameAVG (GriSoft)downloader.generic7.atlyAviraTR/Crypt.XPACK.
GenBitDefenderBehavesLike:Trojan.Ta...

Generic Dropper.bl

- Generic Dropper.bl at McAfee

*.HWP files are documents created with Hangul Word Processor, which is a popular Korean word processor similar
to Open Office or Microsoft Word.These files can contain files, such as *.VBS , *.EXE, *.SCR, *.PIF or *.
ZIP archives or any other format.Generic Dropper.bl is a generic detection that covers those kind of malicious
doc...

Generic Downloader.x!3DD08D7B

- Generic Downloader.x!3DD08D7B at McAfee

File PropertyProperty ValueFileNameloader~1.exeMcAfee DetectionGeneric Downloader.xLength7,056
bytesCRC3DD08D7BMD522977B3266DF327C3A0D53E07AD9FB3DSHA18536BDF02B9768DCB647905B290F21CB52717AC2Other Common
Detection AliasesCompany NameDetection NameAVG (GriSoft)downloader.generic7.asinAviraTR/Crypt.XPACK.GenDr.
WebTrojan.Packed.155eSafe ...

PWS-Mmorpg.gen!F1467D39

- PWS-Mmorpg.gen!F1467D39 at McAfee

File PropertyProperty ValueFileNamenew27.exeMcAfee DetectionPWS-Mmorpg.genLength21,187
bytesCRCF1467D39MD55716E6BEDDDD1D19EF2707ABA580B23ASHA1DD31F0E4B6545C0F201F61E67332D5E105FFA258Other Common
Detection AliasesCompany NameDetection NameavastWin32:Spyware-genAVG (GriSoft)generic11.ajeeAviraTR/Spy.
GenBitDefenderTrojan.PWS.OnlineGames...

PWS-OnlineGames.cn!EDE95B58

- PWS-OnlineGames.cn!EDE95B58 at McAfee

File PropertyProperty ValueFileNamezz.exeMcAfee DetectionPWS-OnlineGames.cnLength125,952
bytesCRCEDE95B58MD5A72F8BAECB0CB717D958D7134AC28019SHA1A475BB8AA07AE4068D6F685BE30B05A7D82CF25FOther Common
Detection AliasesCompany NameDetection NameAviraTR/Crypt.XPACK.GeneSafe (Alladin)Suspicious File
[100]F-Prot~W32/Vaklik.genKasperskyWorm.W...

PWS-Mmorpg.gen!4206D301

- PWS-Mmorpg.gen!4206D301 at McAfee

File PropertyProperty ValueFileName100_24~1.exeMcAfee DetectionPWS-Mmorpg.genLength185,344
bytesCRC4206D301MD5467DE6A7E089757A6ECC99E9BE719328SHA1A40B917094CFB281C1B8540FFCA8F9A0FC9C3C4FOther Common
Detection AliasesCompany NameDetection NameAVG (GriSoft)Win32/NSAntiAviraTR/Crypt.XPACK.GenBitDefenderTrojan.
Crypt.Delf.AFeSafe (Alladin...

TROJ_DROPPER.ED

- TROJ_DROPPER.ED at Trend Micro

This Trojan may be dropped by other malware.It may be downloaded unknowingly by a user when visiting malicious
Web sites.It drops files/components.It then executes the dropped file(s). As a result, malicious routines of
the dropped files are exhibited on the affected system.It creates registry entries to enable its automatic
executio...

Earanc.A

- Earanc.A at Panda

...

Mal/Dial-W

- Mal/Dial-W at Sophos

...

Mal/Dorf-P

- Mal/Dorf-P at Sophos

...

Mal/Dorf-Q

- Mal/Dorf-Q at Sophos

...

Mal/Flux-A

- Mal/Flux-A at Sophos

...

Mal/Mdrop-G

- Mal/Mdrop-G at Sophos

...

Troj/Agent-HUA

- Troj/Agent-HUA at Sophos

Troj/Agent-HUA is a Trojan for the Windows platform. When first run
Troj/Agent-HUA copies itself to <System>\csrcs.exe and creates the following files:
<Temp>\ <Temp>\suicide.bat The following registry entry is
created to run...

Troj/Autorun-KP

- Troj/Autorun-KP at Sophos

...

Troj/Bdoor-AOG

- Troj/Bdoor-AOG at Sophos

Troj/Bdoor-AOG is a Trojan for the Windows platform. Troj/Bdoor-AOG runs
continuously in the background, providing a backdoor server which allows a remote intruder to gain access and
control over the computer via IRC channels. When first run Troj/Bdoor-AOG copies itself
to <...

Troj/Bdoor-AOH

- Troj/Bdoor-AOH at Sophos

When first run Troj/Bdoor-AOH copies itself to <Windows>\WindowsUpdate.exe and
creates the file: <Windows>\admintxt.txt Troj/Bdoor-AOH creates the
following registry entries to run itself at startup:
HKLM\Software\Microsoft\Windows\CurrentVers...