MWBLOG.ORG

Virus Malware and Threat News for 20081228

Troj/Agent-ILV

Troj/PWS-AXD

Troj/DownLnk-A

- Troj/DownLnk-A at Sophos

Troj/DownLnk-A is a Windows Shortcut (.lnk) file which executes a command prompt with paramaters
to download and execute a file from the internet.
...

Troj/Waled-C

- Troj/Waled-C at Sophos

Troj/Waled-C is a backdoor Trojan for the Windows platform. When run
Troj/Waled-C sets the following registry entry:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run PromoReg <path to Trojan
executable>
...

Troj/PSW-GG

- Troj/PSW-GG at Sophos

Troj/PSW-GG is a Trojan for the Windows platform. When run Troj/PSW-GG
creates the files: <Windows>\help\<random characters 1>.dll - detected as Troj/PSW-GG
<Windows>\help\<random characters 2>.dll - detected as Troj/PSW-GG
and set...

Packed.Generic.118

- Packed.Generic.118 at Norton Symantec

Packed.Generic.118 is a heuristic detection for files that may have been obfuscated or encrypted in order to
conceal them from antivirus software.
...

Troj/Agent-IMB

- Troj/Agent-IMB at Sophos

...

Troj/Bypass-E

- Troj/Bypass-E at Sophos

Troj/Bypass-E is a Trojan for the Windows platform. When run Troj/Bypass-E
creates the file <System>\<random characters>.dll (detected as Troj/Virtum-Gen).
Troj/Bypass-E subsequently registers the DLL as a BHO creating registry entries under:
...

Troj/Agent-ILZ

- Troj/Agent-ILZ at Sophos

...

Troj/Agent-IMA

- Troj/Agent-IMA at Sophos

...

Troj/Boaxxe-I

- Troj/Boaxxe-I at Sophos

...

Troj/Daolno-A

- Troj/Daolno-A at Sophos

...

Troj/DownLnk-C

- Troj/DownLnk-C at Sophos

...

Troj/IRCBot-ZI

- Troj/IRCBot-ZI at Sophos

Troj/IRCBot-ZI is a Trojan for the Windows platform. Troj/IRCBot-ZI runs
continuously in the background, providing a backdoor server which allows a remote intruder to gain access and
control over the computer via IRC channels. When first run Troj/IRCBot-ZI copies itself
to <...