Domain: virusradar.com
Stories and comments across the archive that link to virusradar.com.
Comments · 8
-
Re:Read here for a more detailed perspectiveHello,
The first public analysis of the malware campaign (called BlackEnergy by most researchers) was done by Arbor Networks back in October 2007, and Dell SecureWorks did a comprehensive write-up on its second generation in 2010. Additional information on this malware campaign:- We Live Security blog - Back in BlackEnergy: 2014 Targeted Attacks in Ukraine and Poland
- 2014 Virus Bulletin Conference - Last-minute paper: Back in BlackEnergy: 2014 targeted attacks in the Ukraine and Poland and YouTube video of the presentation
- We Live Security blog - CVE-2014-4114: Details on August BlackEnergy PowerPoint Campaigns
- Virus Radar - description of Win32/Rootkit.BlackEnergy.AA
Hope this is information is useful to anyone who might be concerned they have compromised hosts on their network.
Regards,
Aryeh Goretsky -
Kelihos, the peer-to-peer botnet
Shouldn't that be Kelihos, the peer-to-peer Windows botnet
.. -
Re:Better Question
Hello,
Not sure which anti-malware software you are using, but a quick check of my employer's gave me half-a-dozen hits:
- Win32/Adware.Yontoo - added Apr 15 2011
- Win32/Adware.Coupons added - Apr 05 2005
- Win32/Adware.Toolbar.MyWebSearch - added Apr 29 2005
- Win32/TrojanDropper.FunWeb - added Jun 08 2004
- Win32/Freeze - added Feb 02 2006
- Win32/Candy -added Nov 10 2006
Not sure about the others, but would not be surprised if they are detected, just with a different name than you wrote. Maybe you just need to change anti-malware software, and make sure detection of Potentially Unwanted Applications is turned on on it.
Regards,
Aryeh Goretsky
-
Re:Better Question
Hello,
Not sure which anti-malware software you are using, but a quick check of my employer's gave me half-a-dozen hits:
- Win32/Adware.Yontoo - added Apr 15 2011
- Win32/Adware.Coupons added - Apr 05 2005
- Win32/Adware.Toolbar.MyWebSearch - added Apr 29 2005
- Win32/TrojanDropper.FunWeb - added Jun 08 2004
- Win32/Freeze - added Feb 02 2006
- Win32/Candy -added Nov 10 2006
Not sure about the others, but would not be surprised if they are detected, just with a different name than you wrote. Maybe you just need to change anti-malware software, and make sure detection of Potentially Unwanted Applications is turned on on it.
Regards,
Aryeh Goretsky
-
Re:Better Question
Hello,
Not sure which anti-malware software you are using, but a quick check of my employer's gave me half-a-dozen hits:
- Win32/Adware.Yontoo - added Apr 15 2011
- Win32/Adware.Coupons added - Apr 05 2005
- Win32/Adware.Toolbar.MyWebSearch - added Apr 29 2005
- Win32/TrojanDropper.FunWeb - added Jun 08 2004
- Win32/Freeze - added Feb 02 2006
- Win32/Candy -added Nov 10 2006
Not sure about the others, but would not be surprised if they are detected, just with a different name than you wrote. Maybe you just need to change anti-malware software, and make sure detection of Potentially Unwanted Applications is turned on on it.
Regards,
Aryeh Goretsky
-
Re:Better Question
Hello,
Not sure which anti-malware software you are using, but a quick check of my employer's gave me half-a-dozen hits:
- Win32/Adware.Yontoo - added Apr 15 2011
- Win32/Adware.Coupons added - Apr 05 2005
- Win32/Adware.Toolbar.MyWebSearch - added Apr 29 2005
- Win32/TrojanDropper.FunWeb - added Jun 08 2004
- Win32/Freeze - added Feb 02 2006
- Win32/Candy -added Nov 10 2006
Not sure about the others, but would not be surprised if they are detected, just with a different name than you wrote. Maybe you just need to change anti-malware software, and make sure detection of Potentially Unwanted Applications is turned on on it.
Regards,
Aryeh Goretsky
-
Re:Better Question
Hello,
Not sure which anti-malware software you are using, but a quick check of my employer's gave me half-a-dozen hits:
- Win32/Adware.Yontoo - added Apr 15 2011
- Win32/Adware.Coupons added - Apr 05 2005
- Win32/Adware.Toolbar.MyWebSearch - added Apr 29 2005
- Win32/TrojanDropper.FunWeb - added Jun 08 2004
- Win32/Freeze - added Feb 02 2006
- Win32/Candy -added Nov 10 2006
Not sure about the others, but would not be surprised if they are detected, just with a different name than you wrote. Maybe you just need to change anti-malware software, and make sure detection of Potentially Unwanted Applications is turned on on it.
Regards,
Aryeh Goretsky
-
Re:Better Question
Hello,
Not sure which anti-malware software you are using, but a quick check of my employer's gave me half-a-dozen hits:
- Win32/Adware.Yontoo - added Apr 15 2011
- Win32/Adware.Coupons added - Apr 05 2005
- Win32/Adware.Toolbar.MyWebSearch - added Apr 29 2005
- Win32/TrojanDropper.FunWeb - added Jun 08 2004
- Win32/Freeze - added Feb 02 2006
- Win32/Candy -added Nov 10 2006
Not sure about the others, but would not be surprised if they are detected, just with a different name than you wrote. Maybe you just need to change anti-malware software, and make sure detection of Potentially Unwanted Applications is turned on on it.
Regards,
Aryeh Goretsky