NEWS FROM THE LAB - Friday, June 3, 2005

New trojan downloader seeded Posted by Ceco @ 01:05 GMT

A new downloader trojan was seeded today. It comes as a Zip attachment. When extracted - pics.scr file is created. This is a tiny downloader that if run, loops through set of URLs and downloads additional malware. One site from the set was active and hosting a new variant of Bobic.

We released update that adds detection for the downloader as well as the Bobic variant. The downloader is detected as 'Trojan-Downloader.Win32.Small.axr' and the Bobic variant as 'Net-Worm.Win32.Bobic.d'