Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

new trojan out and about


  • Please log in to reply
1 reply to this topic

#1 Piney

Piney

  • Members
  • 119 posts
  • OFFLINE
  •  
  • Location:Alaska
  • Local time:02:27 AM

Posted 21 September 2005 - 02:38 AM

Seems it was discovered Sept. 20, and I got one already!
(looking for the arrow pointing at my head!)


It is called Trojan.Tooso.Q by Symantec. Info on it here: http://securityresponse.symantec.com/avcen...an.tooso.q.html

Seems it loves to delete registry entries/subkeys for:

HKEY_LOCAL_MACHINE\SOFTWARE\Symantec
HKEY_LOCAL_MACHINE\SOFTWARE\McAfee
HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab
HKEY_LOCAL_MACHINE\SOFTWARE\Agnitum
HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software
HKEY_LOCAL_MACHINE\SOFTWARE\Zone Labs

This one has definitely targeted the security items of a computer.
Piney

Infected? Report it! <<<Click


Posted Image

BC AdBot (Login to Remove)

 


m

#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,576 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:27 AM

Posted 21 September 2005 - 09:04 AM

Hacker Spams Huge Quantities Of Trojans, Again
For the second day in a row, an unknown attacker Tuesday spammed major quantities of a new Bagle-esque Trojan horse that turns off virtually every known security program and blocks access to security sites on the Internet.

Several variants of the BagleDI-U Trojan -- dubbed Bagle.cd by McAfee, and  Bagle.da by Trend Micro -- have been spammed since Monday...

securitypipeline.com

For more info:
http://www.trendmicro.com/vinfo/virusencyc...e=TROJ_BAGLE.DA
http://www.trendmicro.com/vinfo/virusencyc...=JAVA_BYTEVER.A
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users