Appoli

Posted: March 28, 2006 | Category: Adware
Appoli is a typical adware application that shows undesirable pop-up advertisements using Internet Explorer. It doesn't spread by itself and must be manually installed. The following newly produced Registry Values are: HKEY..\..\..\.. {RegistryKeys} HKEY_CLASSES_ROOTAppolinaria.Media The following CLSID's were detected: HKEY..\..\ {CLSID Path} FC7E0260-A046-4613-9FD8-1D52EBE22448 88CC91DE-5930-45AD-9E04-6B1233609FEA 1AA8D727-B537-479B-A284-054ECAEBB01B

Fizzle

Posted: March 28, 2006 | Category: Adware
Fizzle adware is an Internet Explorer toolbar that shows undesirable pop-up advertisements. It doesn't spread and must be manually installed. The following files were created in the system:

MyLinker

Posted: March 28, 2006 | Category: Adware
It is an adware application that downloads and shows annoying commercial advertisements. MyLinker doesn't spread and must be manually installed. The following files were created in the system:

Flecsip

Posted: March 28, 2006 | Category: Trojans
Flecsip is a trojan that steals user valuable data entered into login, password or other fields on many web sites. The spyware saves gathered data into a file and sends it to its author via e-mail. The following files were created in the system:

QuickBrowser

Posted: March 28, 2006 | Category: Adware
QuickBrowser adware shows an icon of the Internet search tool in the taskbar. This tool may open commercial sites and show advertisements. QuickBrowser can download and install additional third-party softwares or upgrade itself via the Internet. The adware doesn't spread and must be manually installed. It also can get into the computer along with some ad-supported software. QuickBrowser files are located in the main Windows folder . The spyware runs on every computer startup. The...

Ting

Posted: March 28, 2006 | Category: Browser Hijackers
Ting browser hijacker changes the default Internet Explorer start page to www.78ting.com site. It also disables Windows Registry Editor. Ting must be manually installed, it also can get into the computer along with some ad-supported software. The following files were created in the system:

WWWBar

Posted: March 28, 2006 | Category: Adware
WWWBar is a relatively harmless, but annoying adware application that must be manually installed. It works as a desktop search toolbar, which sends search requests to certain commercial web sites. WWWBar cannot spread and must be manually installed. The following files were created in the system:

Gipma

Posted: March 28, 2006 | Category: Trojans
Gipma trojan shows obscene anti-American text messages and web pages. It hides the taskbar, Start menu and all desktop icons. The following files were created in the system:

Linst

Posted: March 28, 2006 | Category: Trojans
Linst, also known as Sivuxa, is a trojan with additional adware functionality. It collects information about PC software and computer settings and sends it to a predefined web server. It also installs browser add-ons that show undesirable commercial advertisements in Internet Explorer. The following files were created in the system:

Corem

Posted: March 28, 2006 | Category: Trojans
Corem, also known as Xmaib, is a trojan that searches the infected computer for e-mail addresses, collects them and sends out to a predefined web server. The following files were created in the system:

Dasda

Posted: March 28, 2006 | Category: Backdoors
Dasda is a backdoor that gives the remote attacker unauthorized access to a compromised PC. The malicious person can download and install additional applications, execute certain commands and manage the computer. Dasda automatically runs on every Windows startup. Its main file is located in the computer directory C:WinntSystem32. The following files were created in the system:

Anits

Posted: March 28, 2006 | Category: Trojans
Anits is a trojan that downloads malicious files and applications from the Internet, executes and secretly installs them into the computer. Anits activity compromises a PC and severely decreases Internet connection speed. The following files were created in the system:

Homutex

Posted: March 28, 2006 | Category: Backdoors
Homutex is a backdoor that gives the remote attacker full unauthorized access to a compromised PC. It also monitors network traffic, collects computer information and sends it to the attacker. The following files were created in the system:

Licum

Posted: March 28, 2006 | Category: Worms
Licum is an Internet worm that distributes itself to PCs running Windows operating computer with unpatched security flaws. The spyware infects executable files. Its activity severely decreases overall computer performance and Internet connection speed. Licum has the ability to download and install additional malicious files. Consider updating your computer immediately in order to prevent the infection. The following files were created in the system:

Idocha

Posted: March 28, 2006 | Category: Trojans
Idocha trojan searches the computer for e-mail addresses, records them and sends to its author by e-mail. The spyware changes the default Internet Explorer start page to Japanese pornographic site, downloads and open a video file with adult content. Idocha may register the user to a porn service without notification. The following newly produced Registry Values are: HKEY..\..\..\.. {RegistryKeys} HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainStartPage=[linktoapornsite]

Hirofu

Posted: March 28, 2006 | Category: Trojans
Hirofu gathers user sensitive information, personal documents and other valuable data and sends it to the hacker by e-mail. The trojan has the ability to download and install additional malicious applications. Hirofu comes in randomly named files. The following newly produced Registry Values are: HKEY..\..\..\.. {RegistryKeys} HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun[randomname]=C:DocumentsandSettings[CurrentUser]ApplicationData[executablewithrandomname]...

Surfcomp

Posted: March 28, 2006 | Category: Spyware
Surfcomp is a malware spyware that works as a hidden web browser add-on, which monitors user activity in the Internet and records addresses of visited sites. Surfcomp transfers collected data to a predefined web server. It doesn't spread and must be manually installed. It also may come with some ad-supported software. The following files were created in the system:

Reatle

Posted: March 28, 2006 | Category: Worms
Reatle, also known as Lebreat, is a dangerous multifunctional Internet worm that distributes itself by e-mail in messages with infected attachments. It scans the computer for e-mail addresses and uses own mail engine to spread. The spyware also can spread by exploiting other PCs running Windows with unpatched security flaws. Reatle runs on every computer startup and secretly works in background. It turns off Windows Firewall, disables essential Windows security features and computer...

Nafaoz

Posted: March 28, 2006 | Category: Adware
Nafaoz is an adware spyware that monitors user activity in the Internet and opens advertising web sites. Nafaoz doesn't spread and must be manually installed. The following files were created in the system:

NowFind

Posted: March 28, 2006 | Category: Adware
NowFind adware monitors user activity in the Internet and sends a web browser to certain advertising web sites such as gugle.biz. The following newly produced Registry Values are: HKEY..\..\..\.. {RegistryKeys} HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunsvchost=%System%[file] HKEY_CURRENT_USERSoftwareWindowsdate