BugHunter Signature Update 05.08.2007

[Dustin Cook]

http://bughunter.it-mate.co.uk/NEWSIG.TXT

Whats new in this signature database update?
May 8th, 2007

Additions:

Backdoor.Agent.YPN
Backdoor.IRCBot.ABC
Exploit.Ani
Exploit.FrogJpg (+5)
Trojan.Agent.8081
Trojan.Clicker.Delf.Hk
Trojan.DNSChanger.BF
Trojan.Downloader.Delf.Bjy
Trojan.Downloader.Mald.A (+4)
Trojan.Downloader.Tibs.Kv
Trojan.Downloader.Zlob.Bth (+2)
Trojan.FakeAlert.DS
Trojan.FakeAlert.DT
Trojan.FakeCodecs (+13)
Trojan.Peed.Gen
Trojan.PWS.Tanspy.E
Trojan.Spy.Agent.ABW
Trojan.Spy.Bzub.Iq
Unclassified Trojan (+4)

Total now stands at 8,219 signatures for malware.

A seperate updating program is available on the site; You can download
it, unzip it to c:\bughunt and run bhoupdater.bat; it will check the
server and download the most recent version, automatically replacing the
old copy if one is present. You don't have to check the site now for
updates or rely on me to post them here. Just run the updater once every
few days, if something is new, you'll get it.

http://bughunter.it-mate.co.uk


--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - v2.2c
email: bughunter.dustin@gmail.com.removethis
web..: http://bughunter.it-mate.co.uk
Pad..: http://bughunter.it-mate.co.uk/pad.xml

[kurt wismer]

Dustin Cook wrote:
[snip]
> A seperate updating program is available on the site; You can download
> it, unzip it to c:\bughunt and run bhoupdater.bat; it will check the

bho updater? that's a rather unfortunate name... who wants to update
bho's? i thought the point was to get rid of them...

--
"it's not the right time to be sober
now the idiots have taken over
spreading like a social cancer,
is there an answer?"

[Dustin Cook]

kurt wismer <kurtw@sympatico.ca> wrote in news:f1sean$l5a$1
@registered.motzarella.org:

> Dustin Cook wrote:
> [snip]
>> A seperate updating program is available on the site; You can download
>> it, unzip it to c:\bughunt and run bhoupdater.bat; it will check the
>
> bho updater? that's a rather unfortunate name... who wants to update
> bho's? i thought the point was to get rid of them...

I didn't write the batch file nor the applications included with it. It was
sent to me via an email and I was given permission to make use of it if I
so desired. I thought the thing may be useful to some, so it's offered on
the site for those who like "updating" without having to check the website.




--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - v2.2c
email: bughunter.dustin@gmail.com.removethis
web..: http://bughunter.it-mate.co.uk
Pad..: http://bughunter.it-mate.co.uk/pad.xml

[John]

I'm getting a warning from my NOD32 virus checker when I run the
updater - am I safe in assuming it's a false positive?

John

[pcbutts1]

No.

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell



"John" <John@eff2ess.com> wrote in message
news:fldc43h3ks3dapd1dae0krkd0ans9765mr@4ax.com...
> I'm getting a warning from my NOD32 virus checker when I run the
> updater - am I safe in assuming it's a false positive?
>
> John

[David H. Lipman]

From: "John" <John@eff2ess.com>

| I'm getting a warning from my NOD32 virus checker when I run the
| updater - am I safe in assuming it's a false positive?
|
| John

Is this the FireWall al an anti virus message ?

Please post the EXACT "warning".

Chances are it is the FireWall providing a warning on an unknown process trying to access
the Internet. The updater is safe as it uses the GNU WGet utility to download updates to
BugHunter.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[Dustin Cook]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in
news:lrt1i.4113$yy6.3523@trnddc05:

> From: "John" <John@eff2ess.com>
>
>| I'm getting a warning from my NOD32 virus checker when I run the
>| updater - am I safe in assuming it's a false positive?
>|
>| John
>
> Is this the FireWall al an anti virus message ?
>
> Please post the EXACT "warning".
>
> Chances are it is the FireWall providing a warning on an unknown
> process trying to access the Internet. The updater is safe as it uses
> the GNU WGet utility to download updates to BugHunter.
>

HI Dave,

Your description is correct and better than mine. Heh.


--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - v2.2c
email: bughunter.dustin@gmail.com.removethis
web..: http://bughunter.it-mate.co.uk
Pad..: http://bughunter.it-mate.co.uk/pad.xml

[John]

On Sun, 13 May 2007 01:01:05 GMT, "David H. Lipman"
<DLipman~nospam~@Verizon.Net> wrote:

>From: "John" <John@eff2ess.com>
>
>| I'm getting a warning from my NOD32 virus checker when I run the
>| updater - am I safe in assuming it's a false positive?
>|
>| John
>
>Is this the FireWall al an anti virus message ?
>
>Please post the EXACT "warning".
>
>Chances are it is the FireWall providing a warning on an unknown process trying to access
>the Internet. The updater is safe as it uses the GNU WGet utility to download updates to
>BugHunter.

NOD32

Threat detected

File: C:\Program Files\BugHunter\PROCESS.EXE
Threat: Win32/PrcView application

On the one hand I've so far accepted Bughunter as a valuable addition
to the malware fight. On the other hand, no point in running a good
virus killer like NOD32 if I just ignore warnings. Any observations?

Thanks.

John

[Dustin Cook]

John <John@eff2ess.com> wrote in news:fldc43h3ks3dapd1dae0krkd0ans9765mr@
4ax.com:

> I'm getting a warning from my NOD32 virus checker when I run the
> updater - am I safe in assuming it's a false positive?
>
> John
>

The warning is most likely a window asking permission and/or informating
you that WGET.EXE is trying to access the internet. It's a harmless
process.


--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - v2.2c
email: bughunter.dustin@gmail.com.removethis
web..: http://bughunter.it-mate.co.uk
Pad..: http://bughunter.it-mate.co.uk/pad.xml

[Heather]

"John" <John@eff2ess.com> wrote in message
news:fldc43h3ks3dapd1dae0krkd0ans9765mr@4ax.com...
> I'm getting a warning from my NOD32 virus checker when I run the
> updater - am I safe in assuming it's a false positive?
>
Listen to Dustin who is the author......ignore Butts who is a thief and
has disgusting websites. Guess that's it in a nutshell!!