Check Point Advisories

Update Protections against Recent Malware Threats (20-May-09)

Check Point Reference: CPAI-2009-128
Date Published: 20 May 2009
Severity: High
Last Updated: Thursday 01 January, 2009
Source: Rogue-Software: ThreatNuker
Keylogger: Trojan.Spy.Zeus.1.Gen
Trojan: Trojan-PSW.Win32.Papras.dm
Trojan: Trojan.PSW.Win32.QQPass.amx
Worm: W32.Autorun.worm.dq
Worm: Worm.Win32.Koobface.dq
Worm: Worm.Win32.AutoRun.qgg
Worm: Worm.Win32.Oneraw.I.Trojan
Protection Provided by:
Who is Vulnerable? Microsoft Windows clients
Vulnerability Description The update includes new protections against 8 recent malware threats:

Rogue-Software: ThreatNuker - ThreatNuker is a rogue security software that performs fake scans on the system and reports false and exaggerated infections. It attempts to trick the users into purchasing the license of the software to get rid of the infections.

Keylogger: Trojan.Spy.Zeus.1.Gen - Trojan.Spy.Zeus.1.Gen is a Keylogger application that logs the keystrokes on the victim's machine and periodically reports them to a remote server.

Trojan: Trojan-PSW.Win32.Papras.dm - Trojan-PSW.Win32.Papras.dm is a password and private information stealer Trojan that sends out sensitive information from victim's machine to remote hosts.

Trojan: Trojan.PSW.Win32.QQPass.amx - Trojan.PSW.Win32.QQPass.amx is a Trojan that installs malicious code and files into the infected system. The Trojan attempts to steal user's QQ information by modifying system hosts file and redirecting QQ websites access to its controlling website.

Worm: W32.Autorun.worm.dq - W32.Autorun.worm.dq is a network Worm that infects other machines by replicating itself across the accessible network. It also communicates with remote hosts to download malicious content on the victim's machine.

Worm: Worm.Win32.Koobface.dq - Worm.Win32.Koobface.dq is a Worm from the family of Koobface that spreads through social networking sites such as MySpace and Facebook.

Worm: Worm.Win32.AutoRun.qgg - Worm.Win32.AutoRun.qgg is a network Worm that infects other machines by replicating itself across the reachable network. It also communicates with remote hosts to download malicious content on the victim's machine.

Worm: Worm.Win32.Oneraw.I.Trojan - Worm.Win32.Oneraw.I.Trojan is a network Worm that infects other machines by replicating itself across the accessible network. It also communicates with remote hosts to download malicious content on t

Vulnerability DetailsMalware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network access to intrude upon organizations, destroying or stealing data.

Spyware is computer software that is installed without the user's informed consent on a personal computer to intercept or take partial control over the user's interaction with the computer. Spyware programs can collect various types of personal information, install additional software, redirect Web browser activity, or divert advertising revenue to a third party.

Adware is an advertising-supported software package which automatically plays, displays, or downloads advertising material to a computer after the software is installed on it or while the application is being used.

A Trojan horse is a program that installs malicious software while under the guise of doing something else.  Trojans are known for installing backdoor programs which allow unauthorized non permissible remote access to the victim's machine by unwanted parties with malicious intentions.

Protection Overview

×
  Feedback
This website uses cookies for its functionality and for analytics and marketing purposes. By continuing to use this website, you agree to the use of cookies. For more information, please read our Cookies Notice.
OK