3 Replies Latest reply on May 24, 2011 7:52 PM by Peter M Branched from an earlier discussion.

    XP Internet Security 2011

      These are the infections reported by XP Internet Security 2011, (without directory information)

       

      GLj.sys Email-Worm.JS.Gigger

      1F0x.cab IM-Wor.Win32.Kelvir.k

      mI0U1f6s.cab BWME.Twelve.1378

      6hww5wJ50k.dl Devices.2000

      Ik455.cab IRC-WOrm-DOS-Septic

      71KK.rt IRC-Worm.DOS.Loa

      P2P-Worm.Win32.Duload.a

      u6g1.rt Happy_II.506

      .\Irrlicht Ny0YDnJKsR.3t4 Joke.1068

      .\SD_ttf 0jd5j0M1.sp P2P-Worm.Win32.Franvir

      Smartwin\boost\function N7fJ7xQ.g Lemena.3544

      Smartwin\boost\ 2HX5286SL16.ja Kot.b

      53gAGX6Y.f EICAR-Test-File

      1mwpnXM0P.dl Virus.Boot-DOS.V.1526

      Id0U28h3.nw Macro.Visio.Radiant

      Kd.rt Virus.BAT.8Fish

      85M7m55A20X.cab Trojan-Clicker.Win32.Small.k

      anRdX.4vc Trojan-Spy.HTML.Bankfraud

      AllUsers\Application 22SMICU1i8.1u DoS.Win32.DieWar

      AllUsers\Application I.cab Exploit.CodeBaseExec

      AllUsers\Start 7rR0080H.sys Trojan-Spy.HTML.Bankfraud

      8F.rt Trojan-Proxy.Win32.Agent.x

      ASCm6QIu5GQ.rt Email-Worm.VBS.Peach

      brh7v.cab Virus.Boot-DOS.V.1536

      R0tkm8k.cab Macro.PPoint.ShapeShift

      hypVDQbm7X.cab Backdoor.Perl.AEI.I6

      AI.rt Trojan-SMS.J2ME.RedBrows

      mS41yi.1 Trojan-Clicker.Win32.Stixo.d

      254Xpc6s.cab Trojan-Proxy.Win32.Agent.q

      Trojan-BNK.Win32Keylogger.gen

      188.55.70.193 port 20277

      Trojan-PSW.Win32.Coced.219

      I suspect some of these are FLIES: theya re doing nothing, but they would lose social status if they cannot say they have something where things are happening (like one Cicero component I once found in some EnumWindows session...), but some would be actually stealing actively. All these passed through the combined McAfee/MS firewall.