September 2006

Select the links for detailed information and removal tools for the latest viruses

For a Superior AntiVirus/Internet Security solution
Use AVG. Read about it here

W32.Lovena.A 09/27/06 2
W32.Chaim.B 09/21/06 2
W32.Stration.AV 09/20/06 2
W32.Stration.AD 09/20/06 2
W32.Stration.AT 09/19/06 2
W32.Lunalight 09/19/06 2
W32.Stration.AC 09/10/06 2
W32.Areses.Q 09/05/06 2

W32.Areses.Q@mm
Discovered September 5, 2006
Systems Affected: All Windows32 Systems

W32.Areses.Q@mm is a mass-mailing worm that opens a back door on the compromised computer and may download files.

Payload: Sends copies of itself by email to addresses gathered from the compromised computer.
Large Scale E-mailing: Uses its own SMTP engine to mass-mail copies of itself to addresses gathered from the compromised computer.
Distribution Level: Medium
Subject of Email: Varies
Name of Attachment: Varies
Size of Attachment: Varies

Read the full Symantec report here

W32.Stration.AC@mm
Discovered September 10, 2006
Systems Affected: All Windows32 Systems

W32.Stration.AC@mm is a mass-mailing worm that gathers email addresses from the compromised computer.

Payload: Gathers email addresses from the compromised computer.
Modifies Files: Appends text to the hosts file to prevent access to certain URLs.
Distribution Level: Medium
Subject of Email: Varies
Name of Attachment: Varies
Size of Attachment: Varies

Read the full Symantec report here

W32.Lunalight@mm
Discovered September 19, 2006
Systems Affected: All Windows32 Systems

W32.Lunalight@mm is a mass-mailing worm that gathers email addresses from the compromised computer.

Payload: Copies itself to open shares.
Large Scale E-mailing: Mails itself to email addresses gathered from the compromised computer.
Distribution Level: High
Subject of Email: Varies.
Name of Attachment: MYpIC.zip

Read the full Symantec report here

W32.Stration.AT@mm
Discovered September 19, 2006
Systems Affected: All Windows32 Systems

W32.Stration.AT@mm is a mass-mailing worm that gathers email addresses from the compromised computer.

Payload: Gathers email addresses from the compromised computer.
Distribution Level: Medium
Subject of Email: Varies
Name of Attachment: Varies
Size of Attachment: Varies

Read the full Symantec report here

W32.Stration.AD@mm
Discovered September 20, 2006
Systems Affected: All Windows32 Systems

W32.Stration.AD@mm is a mass-mailing worm that gathers email addresses from the compromised computer.

Payload: Gathers email addresses from the compromised computer and downloads a remote file.
Large Scale E-mailing: Sends itself to email addresses gathered from the compromised computer.
Compromises Security Settings: Disables security-related programs.
Distribution Level: Medium
Subject of Email: Varies
Name of Attachment: Varies
Size of Attachment: Varies

Read the full Symantec report here

W32.Stration.AV@mm
Discovered September 20, 2006
Systems Affected: All Windows32 Systems

W32.Stration.AV@mm is a mass-mailing worm that gathers email addresses from the compromised computer.

Payload: Gathers email addresses from the compromised computer and downloads remote files.
Large Scale E-mailing: Sends a copy of itself to email addresses gathered from the compromised computer.
Distribution Level: Low

Read the full Symantec report here

W32.Chaim.B
Discovered September 21, 2006
Systems Affected: All Windows32 Systems

W32.Chaim.B is a worm that has distributed denial of service and back door capabilities. The worm spreads to network shares, through exploiting remote vulnerabilities and may also spread by sending malicious links through AIM, AOL Instant Messenger.

Payload: Opens a back door on the compromised computer.
Large Scale E-mailing: Send links to all the contacts listed in the users AIM
Releases Confidential Info: Steal locally stored passwords
Distribution Level: High
Ports: TCP port 18938
Target of Infection: AIM, AOL Instant Messenger

Read the full Symantec report here

W32.Lovena.A@mm
Discovered September 27, 2006
Systems Affected: All Windows32 Systems

W32.Lovena.A@mm is a mass-mailing worm the also spreads through file sharing networks. The worm modifies the Internet Explorer home page and may arrive as an email attachment named nova.scr.

Large Scale E-mailing: Sends a copy of itself to email address gathered from the compromised computer and modifies the Internet Explorer home page.
Distribution Level: High
Subject of Email: Varies
Name of Attachment: Nova.scr

Read the full Symantec report here