BugHunter Signature Update 02.09.2007

[Dustin Cook]

Whats new in this signature database update?
February 9th, 2007

Additions:
AdWare.DownloadWare.a
Adware.Errorsafe (+3)
Adware.Mirar.B
Adware.SafeError.A.3
Adware.SafeError.A.5
Adware.SafeError.A.6
Adware.SearchAssist.F
Adware.Searchcolor.A.1
Adware.Suggestor.O
Adware.SysProtect (+2)
Adware.VirtuMonde.A7
Adware.Virtumonde.AR.1
Adware.Webhancer (+10)
Adware.WhenUSave
Adware.Wildtanget.ActiveLauncher
Adware.Winfixer.2006.1
Adware.ZangoToolbar (+3)
Rogue.SystemDoctor 2006 (+4)
Rogue.Ultimate Cleaner
Rogue.Winfixer.2006 (+3)
Trojan.Dldr.Agent.Ahv
Trojan.Dldr.Conhook.AA (+2)
Trojan.Dldr.Delf.Aco
Trojan.Dldr.Dyfuca.Dp
Trojan.Dldr.Fakeav.A
Trojan.Dldr.Keenval.H
Trojan.Dldr.Purityscan.A
Trojan.Dldr.Tsupdate.J (+3)
Trojan.Dldr.Winfixer.B
Trojan.Juan.D
Trojan.Juan.E
Trojan.Small.Cy (+2)
Unclassified Trojan (+15)

Total now stands at 5,381 signatures for malware.

--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - V2.1
web: http://bughunter.it-mate.co.uk - email:
bughunter.dustin@gmail.com.removethis

[David H. Lipman]

From: "Dustin Cook" <spamfilterineffect.see.sig@nowhere.com>

| Whats new in this signature database update?
| February 9th, 2007
|
| Additions:
| AdWare.DownloadWare.a
| Adware.Errorsafe (+3)
| Adware.Mirar.B
| Adware.SafeError.A.3
| Adware.SafeError.A.5
| Adware.SafeError.A.6
| Adware.SearchAssist.F
| Adware.Searchcolor.A.1
| Adware.Suggestor.O
| Adware.SysProtect (+2)
| Adware.VirtuMonde.A7
| Adware.Virtumonde.AR.1
| Adware.Webhancer (+10)
| Adware.WhenUSave
| Adware.Wildtanget.ActiveLauncher
| Adware.Winfixer.2006.1
| Adware.ZangoToolbar (+3)
| Rogue.SystemDoctor 2006 (+4)
| Rogue.Ultimate Cleaner
| Rogue.Winfixer.2006 (+3)
| Trojan.Dldr.Agent.Ahv
| Trojan.Dldr.Conhook.AA (+2)
| Trojan.Dldr.Delf.Aco
| Trojan.Dldr.Dyfuca.Dp
| Trojan.Dldr.Fakeav.A
| Trojan.Dldr.Keenval.H
| Trojan.Dldr.Purityscan.A
| Trojan.Dldr.Tsupdate.J (+3)
| Trojan.Dldr.Winfixer.B
| Trojan.Juan.D
| Trojan.Juan.E
| Trojan.Small.Cy (+2)
| Unclassified Trojan (+15)
|
| Total now stands at 5,381 signatures for malware.
|

What no Banker, Bancos or Banload ? :-)

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[Dustin Cook]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in newsobzh.716
$E71.253@trnddc04:


> What no Banker, Bancos or Banload ? :-)

Still processing samples..

Almost finished with the current crop. Will likely be releasing another
signature set this weekend.



--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - V2.1
web: http://bughunter.it-mate.co.uk - email:
bughunter.dustin@gmail.com.removethis

[Pipboy]

On Sat, 10 Feb 2007 03:47:01 GMT, Dustin Cook wrote:


>
> Total now stands at 5,381 signatures for malware.

Hey, I once tried to download your tool but I got a security warning that
it was trying to change the permissions on the folder I was downloading
your tool to. I was running under a limited user account at the time so it
could do sweet **** all. I went back the next day and it downloaded fine
but I never did try it out. What is up with that?

[Dustin Cook]

Pipboy <no@email.invalid> wrote in
news:1brph9zsvqjb1$.143sk5qvhr5pq.dlg@40tude.net:

> On Sat, 10 Feb 2007 03:47:01 GMT, Dustin Cook wrote:
>
>
>>
>> Total now stands at 5,381 signatures for malware.
>
> Hey, I once tried to download your tool but I got a security warning
> that it was trying to change the permissions on the folder I was
> downloading your tool to. I was running under a limited user account
> at the time so it could do sweet **** all. I went back the next day
> and it downloaded fine but I never did try it out. What is up with
> that?

Do you have some sort of download manager or something? As my site doesn't
try to make any changes of anything. It's simple html...

What gave you a security warning? My site has a standard link for the
download, so it doesn't try to do anything out of the ordinary.



--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - V2.1
web: http://bughunter.it-mate.co.uk - email:
bughunter.dustin@gmail.com.removethis

[Pipboy]

On Sat, 10 Feb 2007 22:26:28 GMT, Dustin Cook wrote:


> Do you have some sort of download manager or something? As my site doesn't
> try to make any changes of anything. It's simple html...
>
> What gave you a security warning? My site has a standard link for the
> download, so it doesn't try to do anything out of the ordinary.

Only download manager is the one that comes with Firefox. It was XP that
gave me the security warning. Must have been a glitch due to being in a
limited user account or something as I downloaded the file the next day and
got no such warning. It just made me concerned at first because I wasn't
sure if your file/site was legit or not.

[Dustin Cook]

Pipboy <no@email.invalid> wrote in
news:vgtkwin6eqwn$.1oph5t5df25zb$.dlg@40tude.net:

> On Sat, 10 Feb 2007 22:26:28 GMT, Dustin Cook wrote:
>
>
>> Do you have some sort of download manager or something? As my site
>> doesn't try to make any changes of anything. It's simple html...
>>
>> What gave you a security warning? My site has a standard link for the
>> download, so it doesn't try to do anything out of the ordinary.
>
> Only download manager is the one that comes with Firefox. It was XP
> that gave me the security warning. Must have been a glitch due to
> being in a limited user account or something as I downloaded the file
> the next day and got no such warning. It just made me concerned at
> first because I wasn't sure if your file/site was legit or not.

Understood. I really don't know why it would complain if you were using a
limited user account tho... I don't usually have trouble downloading with
them... Ah well.




--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - V2.1
web: http://bughunter.it-mate.co.uk - email:
bughunter.dustin@gmail.com.removethis

[Pipboy]

On Wed, 14 Feb 2007 02:26:38 GMT, Dustin Cook wrote:


> Understood. I really don't know why it would complain if you were using a
> limited user account tho... I don't usually have trouble downloading with
> them... Ah well.

It would complain because it was trying to change the folder permnissions
and it couldn't. I see someone up above some some weird stuff about you.