BugHunter Signature Update 01.21.2007

[Dustin Cook]

Whats new in this signature database update?
January 21st, 2007

Additions:
Adware.Agent
Adware.CommAd.A (+3)
Adware.Pedev
Adware.PurityScan.AK
Adware.PurityScan.FJ
Adware.Sofotomate.3u
Adware.Softomate.D
Adware.Yazzle (+2)
Adware.Yazzle.Uninstaller
Application.HideWindow.B
BDS/mIRC-570368.A backdoor
DNSChanger.HK.240
Downloader.Generic3.KRE
Downloader.Tibs (+3)
IM-Worm.Win32.VB.au
Malicious HTML Script (+9)
Malicious.Fake.ScreenSaver
PSW.Banker3.DG
Trojan-Dropper.Win32.Agent.zm
Trojan-Spy.Win32.Agent.ir
Trojan-Spy.Win32.Bancos.ze
Trojan.DownLoader.17703
Trojan.Downloader.Banload.SZ
Trojan.Downloader.Delf.MK
Trojan.Downloader.Delf.YT
Trojan.Downloader.PurityScan.dx
Trojan.Downloader.Small.57.A
Trojan.Downloader.Small.Cmm
Trojan.Downloader.Small.Cmm.4
Trojan.Downloader.Tibs.I
Trojan.Downloader.Tibs.TI
Trojan.Downloader.Zlob.AKJ (+3)
Trojan.IeHelper
Trojan.IeHelper.dll
Trojan.Ozdok.B (+2)
Trojan.Patcher.2.1
Trojan.Spambot
Trojan.Spy.Banbra.ER
Trojan.Spy.Bancos.Vn
Trojan.Spy.Bancos.Zm (+10)
Trojan.Spy.Banker.Chc
Trojan.Spy.Win32.Bancos.ze
Trojan.Startpage.AQJ
Unclassified Trojan (+4)
Win32.Virtob.C
Win32.Worm.IM.Licat.J

Removals:
None

Total now stands at 4,784 signatures for malware.

--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - V2.1
web: http://bughunter.it-mate.co.uk
email: bughunter.dustin@gmail.com.removethis
Last updated: January 21st, 2007

[David H. Lipman]

From: "Dustin Cook" <spamfilterineffect.see.sig@nowhere.com>

| Whats new in this signature database update?
| January 21st, 2007
|
| Additions:
| Adware.Agent
| Adware.CommAd.A (+3)
| Adware.Pedev
| Adware.PurityScan.AK
| Adware.PurityScan.FJ
| Adware.Sofotomate.3u
| Adware.Softomate.D
| Adware.Yazzle (+2)
| Adware.Yazzle.Uninstaller
| Application.HideWindow.B
| BDS/mIRC-570368.A backdoor
| DNSChanger.HK.240
| Downloader.Generic3.KRE
| Downloader.Tibs (+3)
| IM-Worm.Win32.VB.au
| Malicious HTML Script (+9)
| Malicious.Fake.ScreenSaver
| PSW.Banker3.DG
| Trojan-Dropper.Win32.Agent.zm
| Trojan-Spy.Win32.Agent.ir
| Trojan-Spy.Win32.Bancos.ze
| Trojan.DownLoader.17703
| Trojan.Downloader.Banload.SZ
| Trojan.Downloader.Delf.MK
| Trojan.Downloader.Delf.YT
| Trojan.Downloader.PurityScan.dx
| Trojan.Downloader.Small.57.A
| Trojan.Downloader.Small.Cmm
| Trojan.Downloader.Small.Cmm.4
| Trojan.Downloader.Tibs.I
| Trojan.Downloader.Tibs.TI
| Trojan.Downloader.Zlob.AKJ (+3)
| Trojan.IeHelper
| Trojan.IeHelper.dll
| Trojan.Ozdok.B (+2)
| Trojan.Patcher.2.1
| Trojan.Spambot
| Trojan.Spy.Banbra.ER
| Trojan.Spy.Bancos.Vn
| Trojan.Spy.Bancos.Zm (+10)
| Trojan.Spy.Banker.Chc
| Trojan.Spy.Win32.Bancos.ze
| Trojan.Startpage.AQJ
| Unclassified Trojan (+4)
| Win32.Virtob.C
| Win32.Worm.IM.Licat.J
|
| Removals:
| None
|
| Total now stands at 4,784 signatures for malware.
|

Nice progression of signature additions Dustin :-)

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[Dustin Cook]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in news:fhath.1132
$JB.64@trnddc05:

> From: "Dustin Cook" <spamfilterineffect.see.sig@nowhere.com>
>
>|
>| Total now stands at 4,784 signatures for malware.
>|
>
> Nice progression of signature additions Dustin :-)

Thanks man. It's a little higher now.

I don't think I'll post for every single update, lately it's been one
every few days. I'm just trying to keep up with the sample flow...

I finally finished a supporting utility for it this evening. I was
manually editing the buginfo.dat file when necessary; moving record ids
when one was removed... Well, the buginfo.dat file has grown and became
too much of an annoyance to continue to do by hand.. So, I've spent the
last hour or so writing more code.. hehe...


thanks again!




--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - V2.1
web: http://bughunter.it-mate.co.uk
email: bughunter.dustin@gmail.com.removethis
Last updated: January 23rd, 2007

[David H. Lipman]

From: "Dustin Cook" <spamfilterineffect.see.sig@nowhere.com>


|
| Thanks man. It's a little higher now.
|
| I don't think I'll post for every single update, lately it's been one
| every few days. I'm just trying to keep up with the sample flow...
|
| I finally finished a supporting utility for it this evening. I was
| manually editing the buginfo.dat file when necessary; moving record ids
| when one was removed... Well, the buginfo.dat file has grown and became
| too much of an annoyance to continue to do by hand.. So, I've spent the
| last hour or so writing more code.. hehe...
|
| thanks again!
|

Keep up the good work Dustin.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm