Trojan.Beagooz.D
This malware was reported by: Symantec
Trojan.Beagooz.D is a Trojan horse program that collects email addresses from the infected computer and sends them to a remote server.
It has been reported that this Trojan may be downloaded by worms from the Beagle family.
Mydoom.AJ
This malware was reported by: Computer Associates
Win32.Bofra.G is a worm that spreads via e-mail. The worm is a 21,910-byte Win32 executable. The worm executable is not attached to e-mail; rather, the e-ma
Trojan.Moo.B
This malware was reported by: Symantec
Trojan.Moo.B is a downloader Trojan that exploits Microsoft Internet Explorer Malformed IFRAME Remote Buffer Overflow Vulnerability (as described in Bugtraq ID 11515).
W32/Bofra-E
This malware was reported by: Sophos
Troj/Bancban-AC
This malware was reported by: Sophos
Mydoom.AL
This malware was reported by: Computer Associates
Win32.Bofra.H is a worm that spreads via e-mail. The worm is a 21,910-byte Win32 executable. The worm executable is not attached to e-mail; rather, the e-ma
BackDoor-CJV
This malware was reported by: Network Associates Inc
Troj/Mastseq-H
This malware was reported by: Sophos
W32/Bofra-A
This malware was reported by: Sophos
TROJ_DELF.HA
This malware was reported by: Trendmicro
This Trojan uses affected machines as a platform to send out spam messages to mobile phones via SMS.
Bofra
This malware was reported by: F-Secure
Bofra is a family of mass-mailing worms which most likely
originates from the MyDoom worm family.
The variants of Bofra are functionally really close to each
other.
Bofra.A
This malware was reported by: F-Secure
Bofra.B
This malware was reported by: F-Secure
Bofra.C
This malware was reported by: F-Secure
Troj/Krepper-L
This malware was reported by: Sophos
W32/Forbot-CF
This malware was reported by: Sophos
W32/Rbot-PS
This malware was reported by: Sophos
W32/Bofra-B
This malware was reported by: Sophos
Spam-SMS.Vlasof
This malware was reported by: Network Associates Inc
W32.Mydoom.AK@mm
This malware was reported by: Symantec
W32.Mydoom.AK@mm is a mass-mailing worm that exploits the Microsoft Internet Explorer Malformed IFRAME Remote Buffer Overflow Vulnerability (as described in Bugtraq ID 11515). The worm also spreads by sending an email to addresses that it finds on the
Trojan.Minuka
This malware was reported by: Symantec
Trojan.Minuka is a Trojan horse that sends Short Message Service (SMS) messages to mobile phone users.
W32.Scard
This malware was reported by: Symantec
W32.Scard is a worm with backdoor functionality that uses a NetBIOS attack to spread to systems that have weak passwords.
Bofra.H
This malware was reported by: Computer Associates
Win32.Bofra.H is a worm that spreads via e-mail. The worm is a 21,910-byte Win32 executable. The worm executable is not attached to e-mail; rather, the e-ma
Bofra.G
This malware was reported by: Computer Associates
Win32.Bofra.G is a worm that spreads via e-mail. The worm is a 21,910-byte Win32 executable. The worm executable is not attached to e-mail; rather, the e-ma
Bofra.E
This malware was reported by: Computer Associates
Win32.Bofra.E is a worm that spreads via e-mail. The worm is a 21,508-byte Win32 executable. The worm executable is not attached to e-mail; rather, the e-
Bofra.C
This malware was reported by: Computer Associates
Win32.Bofra.C is a worm that spreads via e-mail. The worm is a 20,751-byte Win32 executable. The worm executable does not attach to e-mail; rather, the e-ma
Bofra.B
This malware was reported by: Computer Associates
Win32.Bofra.B is a worm that spreads via e-mail. The worm is a 20,648-byte Win32 executable. The worm executable is not attached to e-mail; rather, the e-ma
Revcuss.H
This malware was reported by: Computer Associates
W32/Forbot-CI
This malware was reported by: Sophos
W32/Rbot-PG
This malware was reported by: Sophos
Troj/Banker-FA
This malware was reported by: Sophos
Troj/StartPa-DO
This malware was reported by: Sophos
W32/Bofra-G
This malware was reported by: Sophos
W32/Rbot-PH
This malware was reported by: Sophos
W32/Cran.worm.a
This malware was reported by: Network Associates Inc
BackDoor-CHN.gen
This malware was reported by: Network Associates Inc
Trojan.Webus.D
This malware was reported by: Symantec
Trojan.Webus.D is a Trojan horse program that connects to an IRC server and opens a backdoor on the compromised system.
W32.Bofra.E
This malware was reported by: Symantec
Backdoor.Curdeal
This malware was reported by: Symantec
Backdoor.Curdeal is a Trojan horse program that opens a backdoor on the infected computer and notifies a predetermined Web site.
W32.Bofra.E@mm
This malware was reported by: Symantec
W32.Bofra.E@mm is a mass-mailing worm that exploits the Microsoft Internet Explorer Malformed IFRAME Remote Buffer Overflow Vulnerability (as described in Bugtraq ID 11515). It spreads by sending the email addresses that it finds on an infected compute
W32.Envid.A@mm
This malware was reported by: Symantec
W32.Envid.A@mm is a mass-mailing worm that sends an email to all addresses in the Microsoft Outlook address book.
W32/Forbot-CJ
This malware was reported by: Sophos
W32/Rbot-PJ
This malware was reported by: Sophos
WORM_BOFRA.B
This malware was reported by: Trendmicro
This worm uses the Microsoft Internet Explorer (IE) IFRAME exploit.
WORM_BOFRA.C
This malware was reported by: Trendmicro
This worm spreads via email using its own Simple Mail Transfer Protocol (SMTP) engine. It uses the Microsoft Internet Explorer (IE) IFRAME exploit.
Vundo.dldr
This malware was reported by: Network Associates Inc
W32/Rbot-PU
This malware was reported by: Sophos
W32/Bofra-D
This malware was reported by: Sophos
Prutec
This malware was reported by: Network Associates Inc
W32/Ssik-A
This malware was reported by: Sophos
W32/Bofra-E
This malware was reported by: Sophos
Troj/Mastseq-H
This malware was reported by: Sophos
Backdoor.Selka
This malware was reported by: Symantec
Backdoor.Selka is a backdoor program that allows a remote attacker to obtain unauthorized access to an infected computer.
Downloader-SH
This malware was reported by: Network Associates Inc
W32/Golten.worm
This malware was reported by: Network Associates Inc
-- Update November 17, 2004 --
The risk assessment of this threat has been updated to Low-Profiled due to media attention at:
http://www.theregister.com/2004/11/17/arafat_worm/
--
This worm may be installed via MS04-032 exploit
W32/Agobot-NX
This malware was reported by: Sophos
Troj/Krepper-L
This malware was reported by: Sophos
Darliz.A
This malware was reported by: Computer Associates
Win32.Darliz.A is a backdoor trojan that allows unauthorized remote access to an affected machine. Its speciality, however, seems to be to lower the securit
Golten.A
This malware was reported by: Computer Associates
Win32.Golten.A is a worm that spreads via network shares, however, Computer Associates have received several reports that this worm was initially spammed ou
Glieder.J
This malware was reported by: Computer Associates
Win32.Glieder.J is a trojan that downloads and executes arbitrary files from a long hardcoded list of particular URLs. In the wild, we have seen other varia
W32.Beagle.AX@mm
This malware was reported by: Symantec
W32.Beagle.AX@mm is a mass-mailing worm that also spreads through file-sharing networks. The worm will open a backdoor on TCP port 2002.
Zafi.C
This malware was reported by: Computer Associates
Win32.Zafi.C is a worm that spreads attached to e-mail written in several different languages.
Bagz.E
This malware was reported by: Computer Associates
Win32.Bagz.E is an e-mail worm. It has been distributed as a 111,596-byte, UPX-packed, Win32 executable. It may also be distributed in a ZIP archive.
Bagle.AS
This malware was reported by: Computer Associates
Win32.Bagle.AS is a worm that spreads via e-mail and peer-to-peer file sharing. The worm itself is an FSG-packed executable, approximately 17,000 bytes in l
Troj/Mirchack-D
This malware was reported by: Sophos
W32/Rbot-PS
This malware was reported by: Sophos
WORM_GOLTEN.A
This malware was reported by: Trendmicro
TROJ_VIDLO.G
This malware was reported by: Trendmicro
This downloader Trojan is either installed by a malicious Web site or by other malware and adware.
Aler
This malware was reported by: F-Secure
Aler is a network worm that was widely mass-mailed with the
subject "Latest News about Arafat!!!". The attachments contain
a regular JPEG and and custom-crafted EMF file which exploits
the EMF (MS04-032) vulnerability. The worm does not use
W32/Protoride-W
This malware was reported by: Sophos
W32/Forbot-CI
This malware was reported by: Sophos
Backdoor.Berbew.L
This malware was reported by: Symantec
Backdoor.Berbew.L is a Trojan horse program that steals passwords from an infected computer. The Trojan opens a backdoor allowing a remote attacker to have unauthorized access to the infected computer. The Trojan may also attempt to lower security settin
Backdoor.Netjoe
This malware was reported by: Symantec
Backdoor.Netjoe is a backdoor Trojan horse program that allows a remote attacker to have unauthorized access to an infected computer.
Trojan.Lasta
This malware was reported by: Symantec
Trojan.Lasta is a Trojan horse program that allows a remote attacker to perform various actions on the infected computer by using a remote access program detected as Remacc.Lanstar.
The threat also drops and executes an adware named Adware.Yinstart.
W32/Mofei-E
This malware was reported by: Sophos
Troj/Banker-FA
This malware was reported by: Sophos
Golten.B
This malware was reported by: Computer Associates
Win32.Golten.B is a worm that spreads via network shares.
W32.Bofra.C@mm
This malware was reported by: Symantec
W32.Bofra.B@mm
This malware was reported by: Symantec
W32.Bofra.A@mm
This malware was reported by: Symantec
W32.Bofra.D@mm
This malware was reported by: Symantec
W32/Rbot-PX
This malware was reported by: Sophos
W32/Bofra-G
This malware was reported by: Sophos
Bagle.AW
This malware was reported by: F-Secure
Bagle.AW is a mass-mailing worm with Peer-to-Peer spreading
capabilities. It was found in the middle of November 2004. This
worm is a close variant of Bagle.Z worm. Bagle.AW spreads using
different subjects, email bodies and attachments. The attachmen
Bofra.B
This malware was reported by: Panda Software
Bofra.B is a worm that opens the port 6667 and attempts to connect to several IRC servers.In order to spread to other computers, Bofra.B opens the port 1639 and makes the affected computer act as an HTTP server. Then, it sends e-mail messages to differen
Bofra.C
This malware was reported by: Panda Software
Bofra.C is a worm that opens the port 6667 and attempts to connect to several IRC servers.In order to spread to other computers, Bofra.C opens the port 1639 and makes the affected computer act as an HTTP server. Then, it sends e-mail messages to differen
W32/Agobot-NZ
This malware was reported by: Sophos
W32/Forbot-CJ
This malware was reported by: Sophos
Trojan-Proxy
This malware was reported by: F-Secure
Proxy Trojan (generic description)
TrojanProxy is usually a standalone application that allows
remote hackers to use an infected computer as a proxy to connect
to Internet. That way hackers can hide their original location
because the connection can
Trojan-Notifier
This malware was reported by: F-Secure
Notifier Trojan (generic description)
TrojanNotifier is usually a standalone application that notifies
someone about some event. For example a notifier can inform an
author of a backdoor that it is installed on a computer with
specific IP address on
Trojan-Dropper
This malware was reported by: F-Secure
Trojan-Downloader
This malware was reported by: F-Secure
Trojan-Clicker
This malware was reported by: F-Secure
Trojan Clicker (generic description)
Trojan Clicker is a trojan that remains resident in Windows
memory and constantly tries to connect to certain websites on
Internet. This is done to fake visit counters for certain pages
in order to earn more money
Trojan-Spy
This malware was reported by: F-Secure
Downloader-RK
This malware was reported by: Network Associates Inc
WORM_BAGLE.AX
This malware was reported by: Trendmicro
This mass-mailing worm arrives as an email attachment and can also spread via network shares.
WORM_WOOTBOT.DI
This malware was reported by: Trendmicro
This memory-resident worm arrives and propagates through network shares. Upon execution, it drops a copy of itself as the file SMSS32.EXE in the Windows system folder.
Ng.695
This malware was reported by: Symantec
Ng.695 is a DOS virus that infects .COM files.
W97M/Hope.gen
This malware was reported by: Network Associates Inc
W32/Rbot-PY
This malware was reported by: Sophos