Articles Archive for 8 January 2010

Pakistani National Response Center for Cyber Crimes… Hacked!
Posted in Information and Removal on 8 January 2010

It seems to be the season for defacements and hacktivity. The week began with the Cross Site Scripting attack on the Spanish EU website and the defacement hack of Iranian President Ahmadinejad’s Official site and it closes with a high profile hack of the Pakistani National Response Center for Cyber Crimes, part of the Federal [...]

SysProtector
Posted in Information and Removal on 8 January 2010

SysProtector is a recent clone of the malicious PcsProtector, PCprotectar and other rogue anti-spyware programs belonging to Winisoft. SysProtector may break into the computer system through Trojan infections that can be downloaded with fake video codecs required to watch something online. All this installation is usually done without asking permission, so only when fake system [...]

Trojan.PWS.Onlinegames.KDCI
Posted in BitDefender on 8 January 2010

Trojan.PWS.Onlinegames.KDCI

Trojan-Downloader:JS/Gumblar.X
Posted in F-Secure on 8 January 2010

A trojan that secretly downloads malicious files from a remote server, then installs and executes the files.

Guard Pro
Posted in Information and Removal on 8 January 2010

Guard Pro (also called as GuardPro) is a typical fake anti-spyware application which uses a number of tricky techniques trying to promote itself on a potential victim’s computer. Guard Pro displays fake malware scanners that persistently “detect” many corrupt files, and suggests its services for fixing everything. In fact, the scan is nothing but an [...]

Win32/Zbot.IR
Posted in CA Security Advisor on 8 January 2010

 

Win32/Poison.CE
Posted in CA Security Advisor on 8 January 2010

 

Win32/Bredolab.XW
Posted in CA Security Advisor on 8 January 2010

 

Trojan:W32/DatCrypt
Posted in F-Secure on 8 January 2010

Also known as a trojan horse program, this is a deceptive program that performs additional actions without the user’s knowledge or permission. It does not replicate.

Rogue:W32/DatDoc
Posted in F-Secure on 8 January 2010

Deceptive antivirus software that pressures users into buying or installing it (e.g., infecting a computer; displaying false or alarming warnings or scanning results). Once installed, it may not function as claimed.