MWBLOG.ORG

Virus Malware and Threat News for 20081129

Bloodhound.PDF.1

- Bloodhound.PDF.1 at Norton Symantec

Bloodhound.PDF.1 is a heuristic detection for reporting PDF files that contain JavaScript that may have been
obfuscated or encrypted to conceal it from antivirus software.
...

W32.Delezium!inf

- W32.Delezium!inf at Norton Symantec

W32.Delezium!inf is a detection for files infected by W32.Delezium.
...

W32.Delezium

- W32.Delezium at Norton Symantec

W32.Delezium is a virus that infects executable files and deletes certain files on the compromised computer.
...

Troj/Dloadr-CBF

- Troj/Dloadr-CBF at Sophos

Troj/Dloadr-CBF is a Trojan for the Windows platform. Troj/Dloadr-CBF
contacts malicious websites and may attempt to download additional malware detected as Mal/Behav-300.
Troj/Dloadr-CBF sets the following registry entry to run on startup
HKCU\So...

Troj/Dloadr-CBG

- Troj/Dloadr-CBG at Sophos

...

Troj/Renos-BQ

- Troj/Renos-BQ at Sophos

Troj/Renos-BQ is a downloader Trojan for the Windows platform.
...

Troj/Renos-BR

- Troj/Renos-BR at Sophos

Troj/Renos-BR is a downloader Trojan for the Windows platform.
...

Troj/Renos-BS

- Troj/Renos-BS at Sophos

Troj/Renos-BS is a downloader Trojan for the Windows platform.
...

Troj/Renos-BT

- Troj/Renos-BT at Sophos

Troj/Renos-BT is a downloader Trojan for the Windows platform.
Troj/Renos-BT is a DLL which is typically installed as a Browser Helper Object (BHO) for Microsoft Internet
Explorer....

Mal/ObfJS-AJ

- Mal/ObfJS-AJ at Sophos

Mal/ObfJS-AJ is a script obfuscated in a manner typical of malware.
...

Troj/Agent-IJJ

- Troj/Agent-IJJ at Sophos

Troj/Agent-IJJ is a Trojan for the Windows platform. When first run
Troj/Agent-IJJ copies itself to <Windows>\msauc.exe and creates the file <System>\shell31.dll.
This is a text file and can be safely deleted. The following registry entry is created
to run msauc.ex...

Troj/FakeVir-HV

- Troj/FakeVir-HV at Sophos

...

Troj/Agent-IJN

- Troj/Agent-IJN at Sophos

...

Troj/Agent-IJM

- Troj/Agent-IJM at Sophos

...

Troj/FakeAV-HC

- Troj/FakeAV-HC at Sophos

...

Troj/KeySteal-A

- Troj/KeySteal-A at Sophos

Troj/KeySteal-A obtains keys related to the game Call of Duty 5 from the registry and posts them
to a remote site from where they are retailed to buyers illegally.
...

W32/IRCbot-ADE

- W32/IRCbot-ADE at Sophos

W32/IRCbot-ADE is a worm with IRC backdoor functionality for the Windows platform.
W32/IRCbot-ADE runs continuously in the background, providing a backdoor server which allows a remote
intruder to gain access and control over the computer via IRC channels. When first run
W32/I...