Security
Alerts White
Papers (280 papers) |
1. |
Multiani
(Kaspersky) |
2. |
VBS.Snav
(Symantec) |
3. |
WM97/Marker-JZ
(Sophos) |
4. |
Girlgif.Trojan
/ Imnepr.dll (Symantec) |
5. |
Kaspersky
Reports: The Other Ones (Latest Lesser Known
Viruses): ActiveX, Blaster, Bumerang, Exploit,
Fintas, Kadra, Quamo, Redex, Toil, Paukor,
Yerg |
6. |
VBS.Alal
(Symantec) |
7. |
W32.Aliz.Worm
(Symantec) |
8. |
W32.CBlade.Worm
(Symantec) |
9. |
W32.Eira.57344@mm
/ I-Worm.Quamo (Symantec) |
10. |
W32.Elem.Trojan
(Symantec) |
11. |
W32/Cblade.Worm
/ SQL Worm (Mcafee) |
12. |
W97M/Marker.JY
(Mcafee) |
13. |
BadtransII
Reaches Global Epidemic Proportions
(Kaspersky) |
14. |
I-Worm.BadtransII
(Kaspersky) |
15. |
Win32.Badtrans.29020
(CA) |
16. |
WORM_CBLAD.A
(Trend Micro) |
17. |
Aliz
(F-Secure) |
18. |
Aliz's
Seeds Sown in May Bear Fruit in November
(Kaspersky) |
19. |
BadTrans.B
(F-Secure) |
20. |
BadTrans.B
- A New Variant Emerges (About) |
21. |
BadtransII
Is Out There: Additional Text
(Kaspersky) |
22. |
I-WORM/BADTRANS.B
Spreading At Lightning Speed, Using E-Mail
Attachments (FAV) |
23. |
IWorm_Badtrans
(F-Secure) |
24. |
PSW.GIP
- New Trojan "Gips" into Passwords
(Kaspersky) |
25. |
Troj/PWS-AV
dropped by W32/Badtrans-B worm (Sophos) |
26. |
W32.Badtrans.B@mm
(Symantec) |
27. |
W32/Badtrans-B
(Sophos) |
28. |
W32/Badtrans.B@mm
(CSAV) |
29. |
W32/Badtrans@MM
(Mcafee) |
30. |
W97M.Twopey.B
(Symantec) |
31. |
Win32.BadTrans.13312
Worm / Win32.Badtrans.21882 Trojan (CA) |
32. |
WORM_ALIZ.A
(Trend Micro) |
33. |
WORM_BADTRANS.B
(Trend Micro) |
34. |
Aliz
(F-Secure) |
35. |
PE_JIMMY.B
(Trend Micro) |
36. |
W32.Delalot.Trojan
(Symantec) |
37. |
WM97/Ethan-EN
(Sophos) |
38. |
WM97/Marker-JX
(Sophos) |
39. |
MoSucker
(F-Secure) |
40. |
W32/Redesi-H
(Sophos) |
41. |
WORM_PETTICK.A
(Trend Micro) |
42. |
BAT.Sakura
(Kaspersky) |
43. |
Beware
of WORM.BUMERANG (Kaspersky) |
44. |
FORM
Boot Virus Attacks on the 16th of Each Month
(Kaspersky) |
45. |
I-Worm.Finaldo
(Kaspersky) |
46. |
VBS_PILA.A
(Trend Micro) |
47. |
W32.Funsoul@mm
(Symantec) |
48. |
W32.Viled.gen
(Symantec) |
49. |
W97M.Death.C
(Symantec) |
50. |
Win32.Yerg
(Kaspersky) |
51. |
W32/Klez-D
(Sophos) |
52. |
WM97/Goodday-C
(Sophos) |
53. |
WM97/Marker-FP
(Sophos) |
54. |
WM97/Wrench-T
(Sophos) |
55. |
TROJ_KLEZ.C
(Trend Micro) |
56. |
W32.Klez.D@mm
(Symantec) |
57. |
W32.Paukor.B@mm
(Symantec) |
58. |
W32/Klez-C
(Sophos) |
59. |
VBS.Bici
(demo) (Symantec) |
60. |
W97M.Cerin.A
(Symantec) |
61. |
WM97/Myna-Fam
(Sophos) |
62. |
WM97/Wrench-Q
(Sophos) |
63. |
Nimda.E
(F-Secure) |
64. |
PE_NIMDA.E |
65. |
W32/Klez-B
(Sophos) |
66. |
XM97/Divi-AN
(Sophos) |
67. |
XM97/Divi-R
(Sophos) |
68. |
XM97/Slacker-E
(Sophos) |
69. |
Nimda
is Breeding (Kaspersky) |
70. |
TROJ_PWS.REDNECK
(Trend Micro) |
71. |
W32.Nimda.E@mm
(Symantec) |
72. |
W32/Nimda-D
(Sophos) |
73. |
WM97/Ded-K
(Sophos) |
74. |
W32.ElKern.3326
(Symantec) |
75. |
Combination
of a Worm and Virus - Klez & ElKern - Going
Around (F-Secure) |
76. |
PE_ELKERN.A
(Trend Micro) |
77. |
TROJ_ANSET.B
(Trend Micro) |
78. |
TROJ_KLEZ.A
(Trend Micro) |
79. |
W32.Klez.A@mm
(Symantec) |
80. |
I-Worm.Anset
(Kaspersky) - A New Internet Worm Terrorizes
German Users |
81. |
I-Worm.Kiray
(Kaspersky) |
82. |
PE_TOAL.A
(Trend Micro) |
83. |
TROJ_RUSH.A
(Trend Micro) |
84. |
TROJ_SEPTER.A
(Trend Micro) |
85. |
VBS_VBSWG.GEN
(Trend Micro) |
86. |
An
Outbreak of Anthrax on the Internet?
ANTRAXINFO.VBS or ANTRAX.JPG.VBS
(Kaspersky) |
87. |
Backdoor.Oblivion
(Symantec) |
88. |
JS_EXCEPTION.C
(Trend Micro) |
89. |
Redesi.A
and Redesi.B Worms: Beware of the Bogus Patches
(Kaspersky) |
90. |
TROJ_BADTRANS.A
(Trend Micro) |
91. |
VBS.Dayumi
(Symantec) |
92. |
VBS.VBSWG.D@mm
(Symantec) |
93. |
W32.Anset.Worm
(Symantec) |
94. |
W32.DpBot.Trojan
(Symantec) |
95. |
W32.JavaKiller.Trojan
(Symantec) |
96. |
W32.Nimda.B@mm
(Symantec) |
97. |
W32.Nimda.C@mm
(Symantec) |
98. |
W32.Redesi.B@mm
(Symantec) |
99. |
W32.Redesi@mm
(Symantec) |
100. |
W32.Toal.A@mm
(Symantec) |
101. |
W97M.Grac.A
(Symantec) |
102. |
W97M.Thelar.A
(Symantec) |
103. |
WebMoney
Users Are Once Again in a "High-Risk" Group:
Backdoor.KWM (Kaspersky) |
104. |
WM97/Myna-AZ
(Sophos) |
105. |
Zeton.Mirc
(Symantec) |
106. |
JS_SEEKER.B
(Trend Micro) |
107. |
Kaspersky
Labs Warns Not to Use the Internet or E-Mail
without the [NIMDA] Patch |
108. |
Kaspersky
Labs Warns of the Possible Exploitation of the
Recent Tragic Events [WTC.TXT.VBS] |
109. |
New
Victims of the Nimda Network Worm
(Kaspersky) |
110. |
Nimda
(F-Secure) |
111. |
PE_DION.A
(Trend Micro) |
112. |
PE_NIMDA.A
(Trend Micro) |
113. |
TROJ_JESTRO.A
(Trend Micro) |
114. |
TROJ_KALM.A.SVR
(Trend Micro) |
115. |
TROJ_VOTE.A
(Trend Micro) |
116. |
TROJ_VOTE.B
(Trend Micro) |
117. |
TROJ_VOTE.C
(Trend Micro) |
118. |
W32.HLLW.Giwin
(Symantec) |
119. |
W97M.Likon.A
(Symantec) |
120. |
W97M.Tador.A
(Symantec) |
121. |
Warning:
Fake Message Contains Trojan |
122. |
CERT®
Advisory CA-2001-26 Nimda Worm |
123. |
DonaldD.Trojan.C
(Symantec) |
124. |
Information
on the Nimda Worm (Microsoft) |
125. |
Trojan.ZeroBoot
(Symantec) |
126. |
TROJ_MUSTARD.A
(Trend Micro) |
127. |
Umisy.2322
(Symantec) |
128. |
W32.Nimda.A@mm
(Symantec) |
129. |
Your
Stolen Passport |
130. |
%u
Encoding IDS Bypass Vulnerability |
131. |
Blue
Code: A Worm that Fights Code Red and IIS
Servers |
132. |
IRC.Forca.Worm
(Symantec) |
133. |
Multi-Vendor
Unicode IDS Bypass |
134. |
OF97/Jerk-J
(Sophos) |
135. |
TROJ_BLUECODE.A
(Trend Micro) |
136. |
TROJ_WHISTLER.A
(Trend Micro) |
137. |
W32.BlueCode.Worm
(Symantec) |
138. |
CODERED.B
(Trend Micro) |
139. |
Cuerpo:
A Stealth Worm with Perfected Spreading Technology
(Kaspersky) |
140. |
I-Worm.Readme |
141. |
Lustrous
Attraction to Lara Croft Threatens Computer
Safety |
142. |
PE_Funlove.4099
(Trend Micro) |
143. |
PE_MAGISTR.B
(Trend Micro) |
144. |
The
Return of Magistr |
145. |
TROJ_APOST.A
(Trend Micro) |
146. |
VBS/Cuerpo-A
(Sophos) |
147. |
Win32.All3gro.A:
New Worm Cleans Up--and Maybe Cleans Out--Infected
Machines |
148. |
WM97/Ethan-EJ
(Sophos) |
149. |
WM97/Titch-K
(Sophos) |
150. |
W95.SoFunny.Worm@m
(Symantec) |
151. |
Apost
[/ Urquest / Yoview / Urgent] (F-Secure) |
152. |
CERT®
Advisory CA-2001-24: Vulnerability in OpenView and
NetView |
153. |
New
Code Red [D] Variant Discovered |
154. |
TROJ_ZERAF.A
(Trend Micro) |
155. |
VBS_HAPTIME.A
(Trend Micro) |
156. |
W32.Magistr.39921@mm
(Symantec) |
157. |
W32.Urgent.Worm@mm
(Symantec) |
158. |
Asylum
(F-Secure) |
159. |
Hai
(F-Secure) |
160. |
JS.Trojan.Loop
(F-Secure) |
161. |
New
Win32.All3gro.A Worm Poses as Helpful
Program |
162. |
Offensive
(F-Secure) |
163. |
SSIWG
(F-Secure) |
164. |
WM97/Metys-L
(Sophos) |
165. |
.ida
Code Red Worm (eEye) |
166. |
14
Aug 2001 - W32/Modnar.A-mm - New Mass
Mailer |
167. |
31
Aug 2001 - VBS/Cuerto.A-mm |
168. |
Backdoor.G_Door
(Symantec) |
169. |
Backdoor.Penrox
(Symantec) |
170. |
Backdoor.Y3KRat.12
(Symantec) |
171. |
Blocking
Code Red Worm with Cisco IOS NBAR |
172. |
CERT®
Advisory CA-2001-11 Sadmind/IIS Worm |
173. |
CERT®
Advisory CA-2001-19: Code Red Worm Exploiting
Buffer Overflow in IIS Indexing Service
DLL |
174. |
CERT®
Advisory CA-2001-20 Continuing Threats to Home
Users |
175. |
CERT®
Advisory CA-2001-21 Buffer Overflow in
telnetd |
176. |
CERT®
Advisory CA-2001-22 W32/Sircam Malicious
Code |
177. |
CERT®
Advisory CA-2001-23 Continued Threat of the Code
Red Worm |
178. |
CERT®
Incident Note IN-2001-09 / Code Red II: Another
Worm Exploiting Buffer Overflow in IIS Indexing
ServiceDLL |
179. |
CERT®
Summary CS-2001-03: Quarterly Virus
Bulletin |
180. |
Cisco
Security Advisory: CBOS Web-based Configuration
Utility Vulnerability |
181. |
Cisco
Security Advisory: Cisco Secure Intrusion
Detection System Signature Obfuscation
Vulnerability |
182. |
Cisco
Security Advisory: Code Red Worm - Customer
Impact |
183. |
Cisco
Security Advisory: IOS HTTP Authorization
Vulnerability |
184. |
Cisco
Security Advisory: Multiple SSH Vulnerabilities -
Revision 1.5 |
185. |
Code
Red (F-Secure) |
186. |
Code
Red and Access Attacks (MacFixit) |
187. |
Code
Red II Worm Analysis Update |
188. |
Code
Red Status / Step-by-Step Instructions for
Patching IIS Servers |
189. |
Code
Red Update |
190. |
Code
Red: Get Rid of the Worm |
191. |
CodeRed
II (Symantec) |
192. |
CODERED.A
(Mcafee) |
193. |
CODERED.A
(Trend Micro) |
194. |
CodeRedv3
(CA) |
195. |
Dealing
with mallocfail and High CPU Utilization Resulting
from the Code Red Worm |
196. |
Finjan
Malicious Code Alert: Lara Croft Theme
Worm |
197. |
Finjan
Malicious Code Alert: Mawanella Worm |
198. |
Finjan
Software Malicious Code Alert: SirCam
Worm |
199. |
It's
Back: Code Red II Strikes (TechWeb) |
200. |
JS.Seeker.B
(Symantec) |
201. |
JS_EXCEPTION.GEN
/ Trojan.Seeker-based / JS.Exception.Exploit
(Trend Micro) |
202. |
JS_KAKWORM.A
(Trend Micro) |
203. |
JS_OFFENSIVE.A
(Trend Micro) |
204. |
JS_SEEKER.W
(Trend Micro) |
205. |
Macro
Viruses |
206. |
Magistr
(About) |
207. |
Magistr
(F-Secure) |
208. |
Multiple
Remote DoS Vulnerabilities in DCE/RPC
Deamons |
209. |
NIMDA
Virus Information and Step-By-Step
Removal |
210. |
Offensive
Trojan Horse Can Seriously Damage Your
PC |
211. |
Onex
(F-Secure) |
212. |
PDF
Worm (F-Secure) |
213. |
PE_MAGISTR.A
(Trend Micro) |
214. |
PE_MAGISTR.DAM
(Trend Micro) |
215. |
PE_NIMDA.B
(Trend Micro) |
216. |
Potok
(F-Secure) |
217. |
Security
Alert: A Message from Jerry Stalks MSN Messenger
Users |
218. |
Security
Alert: Parrot is a Dirty Bird |
219. |
Sircam
(F-Secure) |
220. |
StealthWatch:
Detecting the Code Red Worm and its
Variants |
221. |
The
Spread of the Code-Red Worm - CRv2
(Caida) |
222. |
Trojan.JS.Clid.gen
(Symantec) |
223. |
Trojan.JS.Clid.gen
(Symantec) |
224. |
Trojan.JS.Cover
(Symantec) |
225. |
Trojan.Pounds
(Symantec) |
226. |
TROJ_ALIZ.A
(Trend Micro) renamed WORM_ALIZ.A on
11/24/2001 |
227. |
TROJ_HYBRIS.DLL
(Trend Micro) |
228. |
TROJ_HYBRIS.M
(Trend Micro) |
229. |
TROJ_INVALID.A
(Trend Micro) |
230. |
TROJ_NEWSAGENT.A
(Trend Micro) |
231. |
TROJ_SIRCAM.A
(Trend Micro) |
232. |
TROJ_SPYBOY.A
(Trend Micro) |
233. |
Using
Network-Based Application Recognition and Access
Control Lists for Blocking the Code Red Worm at
Network Ingress Points |
234. |
VBS.Fiber.C
(Symantec) |
235. |
VBS.Proud.A@mm
(Symantec) |
236. |
VBS.Zync.A
(Symantec) |
237. |
VBS/FindPeach.A,
aka VBS_PEACHYPDF.A, VBS/PeachyPDF@MM
(CA) |
238. |
VBSWG.Q@mm
(F-Secure) |
239. |
VBS_MERLIN.C
(Trend Micro) |
240. |
Virus
Glossary of Terms (Mcafee) |
241. |
W32
/ Sircam-A (Sophos) |
242. |
W32.Invictus.dll
(Symantec) |
243. |
W32.Qint@mm
(Symantec) |
244. |
W32.SirCam.Worm@mm |
245. |
W32.Sircam.Worm@mm
(Symantec) |
246. |
W32.Zoek@mm
(Symantec) |
247. |
W32/CodeRed-II
/ Trojan.VirtualRoot (Sophos) |
248. |
W32/CodeRed.c.worm
(Mcafee) |
249. |
W32/Finaldo-B
(Sophos) |
250. |
W32/Jerrym
(Sophos) |
251. |
W32/Magistr-B
(Sophos) |
252. |
W32/Petik-K
(Sophos) |
253. |
W32/SirCam@MM
(Mcafee) |
254. |
W32/Sofunny
(Sophos) |
255. |
W32/Yarik
(Sophos) |
256. |
W97M.Marker.JG
(Symantec) |
257. |
W97M_DED.R
(Trend Micro) |
258. |
Win32.SirCam.137216
(CA) |
259. |
Win32.SQL
(CAI) |
260. |
WM97/CopyMe-A
(Sophos) |
261. |
WM97/Footer-AB
(Sophos) |
262. |
WM97/Hope-P
(Sophos) |
263. |
WM97/Marker-GG
(Sophos) |
264. |
WM97/Marker-GP
(Sophos) |
265. |
WM97/Thus-FB
(Sophos) |
266. |
XM97/Laroux-OH
(Sophos) |
267. |
Bymer
Spreads Through Open Network Shares |
268. |
CERT®
Advisory CA-2000-02 Malicious HTML Tags Embedded
in Client Web Requests |
269. |
The
FunLove Virus Worm (SANS) |
270. |
The
Hybris Virus Comes in Many Variations |
271. |
Trinity
v3/ Stacheldraht 1.666 Distributed Denial of
Service Tool |
272. |
TROJ_HYBRIS.A
(Trend Micro) |
273. |
TROJ_HYBRIS.C
(Trend Micro) |
274. |
VBS_STAGES.A
(Trend Micro) |
275. |
W32.HLLW.Bymer
(Symantec) |
276. |
Who’s
to Blame for this New-Found Love? |
277. |
FBI
Alert: Explore.Zip Worm Virus |
278. |
PE_MTX_II.A
(Trend Micro) |
279. |
SirCam
Virus Information & Removal Details |
280. |
WM97/Marker-GF
(Sophos) |