MWBLOG.ORG

Virus Malware and Threat News for 20090426

W32.Mocon

- W32.Mocon at Norton Symantec

W32.Mocon is a worm that logs keystrokes and steals information from the infected computer. It spreads by
copying itself to removable drives.
...

Troj/Agent-JQL

- Troj/Agent-JQL at Sophos

...

Troj/Dloadr-CLQ

- Troj/Dloadr-CLQ at Sophos

Troj/Dloadr-CLQ is a Trojan for the Windows platform. Troj/Dloadr-CLQ
includes functionality to access the internet and communicate with a remote server via HTTP.
The following registry entry is created to run Troj/Dloadr-CLQ on startup:
HKCU\Software\Mi...

Troj/Rustock-C

- Troj/Rustock-C at Sophos

Troj/Rustock-C copies itself to the Temp folder with a TMP extension and creates a
randomly named file SYS in the Windows system folder. The TMP file may be deleted after a reboot.
The SYS file is installed as a service with the same name as the file itself, excluding the SYS
extension. ...

Troj/BHO-LV

- Troj/BHO-LV at Sophos

...

Troj/Fakevir-MC

- Troj/Fakevir-MC at Sophos

...

Bloodhound.PDF.11

- Bloodhound.PDF.11 at Norton Symantec

Bloodhound.PDF.11 is a heuristic detection for potentially malicious PDF files that may exploit known
vulnerabilities in Adobe Acrobat in order to perform further malicious actions.
...

SillyBAT.A

- SillyBAT.A at Panda

It prevents the computer from working properly, as it does not allow to run the function Search
of the Start menu, applications such as the Task Managerand the Windows Explorer, and the
files with a DOC and XLS extension, among others. It spreads via the P2P file sharing programs.
...