Virus Detail

Latest threats.

11-18	Trojan-Downloader. Win32. FraudLoad. vmli Displays False Scans!
11-03	Trojan-Downloader. Win32. VB. dck Connects to Remote Servers!
10-14	Trojan-Downloader. Win32. Mutant. fka Downloads Malicious Files!
10-05	Trojan. Win32. FraudPack. udm Pretends to be Flash View Update!
09-25	Trojan. Win32. Agent2. fsk
09-15	Trojan-Spy. Win32. Zbot. pqd
09-08	Trojan-Downloader. Win32. Agent. bmwp
09-01	Trojan-Spy. Win32. Zbot. mty
08-20	Tax Refund Email Phishing Scam!
07-07	New Microsoft Internet Explorer Vulnerability Discovered!
04-24	Shadow, The Conficker Cyber Worm Update!
03-31	Shadow, The Conficker Cyber Worm!
03-12	Trojan. Click. 24528 Updates Itself!
02-11	Trojan. NtRootKit. 429 Compromises Infected Computer Security!
02-05	BackDoor. Zapinit Infects User32. dll!
01-30	Trojan. DownLoad. 28421 Downloads Malware!
01-27	New Muldrop Variant!
01-22	Win32. HLLW. MyBot Spreads Over Networks!
01-15	Win32. HLLW. Autoruner Exploits Shared Folders!
01-09	Trojan. Starter. 212 Replaces Winlogon File!
01-08	Trojan. PWS. Zombie. 1 Prompts You To Infect!
01-02	Trojan. StartPage. 3072 Hijacks Your Homepage!
12-12	Trojan. Popuper. 13903 Adds BHO!
11-10	Trojan. Muldrop Delivered By P2P Networks!
10-21	Fake Bank of America Security Emails!
09-10	Trojan. Briss Logs Your Information!
09-09	Trojan. Sentinel Uses HTTP!
08-19	Trojan. MulDrop. 5747 Spreads Through Peer-to-Peer!
08-14	Trojan. Proxy. 884 Communicates With Websites!
08-07	Trojan. DownLoader. 12995 Downloads Code!

Win32.HLLW.MyBot Spreads Over Networks!

Win32.HLLW.MyBot.based

What It Does:

Adds itself to the Windows system directory.

Modifies the computer's registry so that it starts when Windows starts.

Displays a message that the computer needs to shut down. Shows a countdown and shuts down the computer.

Blindly looks for other computers on the same network and silently spreads.

Harvests computer information and transmits it to remote computers.

How It Infects:
Win32.HLLW.MyBot can be distributed by any means, including but not limited to:

Email attachments

Instant message attachments

Infected websites

Hyperlinks to infected websites from email or instant messages

Downloading by other malware

Through peer-to-peer networks

Once one computer on a network is infected, MyBot broadcasts to other local IP addresses.

How To Avoid Infection:
Do not click any unexpected links in instant messages. Do not download email attachments from unexpected sources. Do not download unknown files or files from unknown sources. Scan all downloaded files with StopSign and ensure that all updates are installed from Microsoft Update.

Vulnerable Operating Systems:
Windows 95/98/Me/NT/2000/XP

Type:
Worm

Technical Name:
Win32.HLLW.MyBot.based

Aliases:

m/Rbot.172032.10

Win32:Trojano-352

IRC/BackDoor.SdBot2.EZC

Backdoor.SDBot.7F4521A2

DNAScan

Win32/RBot.Variant!Worm

Backdoor.Win32.Agobot.AAF

Backdoor.Win32.Rbot.adf

W32/Sdbot.worm.gen.bh

Win32/Rbot

W32/Sdbot.HNZ.worm

W32.Spybot.Worm