Tuesday, December 21, 2010

TR/Spy.Banker.XH.10

 General Method of propagation:
• No own spreading routine

Aliases:
•  Symantec: Suspicious.MH690.A
•  Kaspersky: Trojan-Spy.Win32.Zbot.avtr
•  F-Secure: Trojan-Spy.Win32.Zbot.avtr
•  Sophos: Mal/Agent-IE
•  Microsoft: TrojanSpy:Win32/Banker.XH
•  AVG: Delf.UYL
•  Panda: Trj/CI.A
•  Grisoft: Delf.UYL
•  Eset: Win32/Delf.PLO
•  AhnLab: Win-Trojan/Agent.300544.V
•  Ikarus: Trojan-Spy.Win32.Banker

Platforms / OS:
• Windows 95
• Windows 98
• Windows 98 SE
• Windows ME
• Windows 2000
• Windows XP
• Windows 2003
• Windows Vista
• Windows Server 2008
• Windows 7

Side effects:
• Registry modification
• Steals information

Description inserted by Alexander Bauer on Thursday, December 16, 2010
Description updated by Alexander Bauer on Thursday, December 16, 2010

View the original article here