16 Jul
Posted by CANAL INFORMACION CASTELLANO DOCTORINTERNET VIRUS as Uncategorized
Kaspersky Lab, a leading developer of secure content management solutions, has detected the latest version of Gpcode, a virus which encrypts user data and demands payment for the decryption routine. Virus.Win32.Gpcode.ai, which was detected last week, uses a complex encryption algorithm to…
Win32/Puper.JJ is a trojan that changes a user's Internet Explorer homepage and default search page. It also monitors sites visited by the affected user. This variant has been distributed as a 24,576-byte Win32 executable. For more detailed information regarding the functionality of the Win32/Puper family, please visit the Win32/Puper description elsewhere in our encyclopedia.
Win32/Puper.JI is a trojan that changes a user's Internet Explorer homepage and default search page. It also monitors sites visited by the affected user. This variant has been distributed as a 39,176-byte Win32 executable. For more detailed information regarding the functionality of the Win32/Puper family, please visit the Win32/Puper description elsewhere in our encyclopedia.
03 Jul
Posted by CANAL INFORMACION CASTELLANO DOCTORINTERNET VIRUS as Uncategorized
Win32/Beovens.IL is from a family of downloading trojans. Beovens may be installed by several methods, such as via exploiting a vulnerability in Internet Explorer (MS05-54 Mismatched Document Object Model Objects Memory Corruption Vulnerability) or it may be unwittingly downloaded by users, masquerading as a video codec installer. For more detailed information regarding the functionality of the Win32/Beoven…
03 Jul
Posted by CANAL INFORMACION CASTELLANO DOCTORINTERNET VIRUS as Uncategorized
Win32/Beovens.IK is from a family of downloading trojans. Beovens may be installed by several methods, such as via exploiting a vulnerability in Internet Explorer (MS05-54 Mismatched Document Object Model Objects Memory Corruption Vulnerability) or it may be unwittingly downloaded by users, masquerading as a video codec installer. For more detailed information regarding the functionality of the Win32/Beoven…
03 Jul
Posted by CANAL INFORMACION CASTELLANO DOCTORINTERNET VIRUS as Uncategorized
Win32.Agobot is an IRC controlled backdoor that can be used to gain unauthorized access to a victim's machine. It can also exhibit worm-like behavior by exploiting weak passwords on administrative shares and by exploiting many different software vulnerabilities, as well as backdoors created by other malware. There are hundreds of variants of Agobot, and new variants are consistently being developed. However, t…
03 Jul
Posted by CANAL INFORMACION CASTELLANO DOCTORINTERNET VIRUS as Uncategorized
Win32.Agobot is an IRC controlled backdoor that can be used to gain unauthorized access to a victim's machine. It can also exhibit worm-like behavior by exploiting weak passwords on administrative shares and by exploiting many different software vulnerabilities, as well as backdoors created by other malware. There are hundreds of variants of Agobot, and new variants are consistently being developed. However, t…
This malware is detected by eTrust Antivirus solutions. Please see above for the relevant signature updates. This malware is being dissected by the CA Security Advisory Team - a detailed analysis will be available shortly.
03 Jul
Posted by CANAL INFORMACION CASTELLANO DOCTORINTERNET VIRUS as Uncategorized
This malware is detected by eTrust Antivirus solutions. Please see above for the relevant signature updates. This malware is being dissected by the CA Security Advisory Team - a detailed analysis will be available shortly.
03 Jul
Posted by CANAL INFORMACION CASTELLANO DOCTORINTERNET VIRUS as Uncategorized