new trojan out and about

BleepingComputer.com: new trojan out and about

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

new trojan out and about

#1 Piney

Member

Group: Members
Posts: 119
Joined: 11-June 05
Location:Alaska

Posted 21 September 2005 - 02:38 AM

Seems it was discovered Sept. 20, and I got one already!
(looking for the arrow pointing at my head!)

It is called Trojan.Tooso.Q by Symantec. Info on it here: http://securityresponse.symantec.com/avcen...an.tooso.q.html

Seems it loves to delete registry entries/subkeys for:

Quote

HKEY_LOCAL_MACHINE\SOFTWARE\Symantec
HKEY_LOCAL_MACHINE\SOFTWARE\McAfee
HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab
HKEY_LOCAL_MACHINE\SOFTWARE\Agnitum
HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software
HKEY_LOCAL_MACHINE\SOFTWARE\Zone Labs

This one has definitely targeted the security items of a computer.

Piney

Infected? Report it! <<<Click

Posted Image

#2 quietman7

Bleepin' Janitor

Group: Global Moderator
Posts: 25,113
Joined: 09-July 05
Location:Virginia, USA

Posted 21 September 2005 - 09:04 AM

Quote

Hacker Spams Huge Quantities Of Trojans, Again
For the second day in a row, an unknown attacker Tuesday spammed major quantities of a new Bagle-esque Trojan horse that turns off virtually every known security program and blocks access to security sites on the Internet.

Several variants of the BagleDI-U Trojan -- dubbed Bagle.cd by McAfee, and Bagle.da by Trend Micro -- have been spammed since Monday...

securitypipeline.com

For more info:
http://www.trendmicro.com/vinfo/virusencyc...e=TROJ_BAGLE.DA
http://www.trendmicro.com/vinfo/virusencyc...=JAVA_BYTEVER.A

Microsoft MVP - Consumer Security 2007-2012