Check Point Advisories

Update Protection against Recent Malware Threats (19-Aug-09)

Check Point Reference: CPAI-2009-161
Date Published: 19 Aug 2009
Severity: High
Last Updated: Thursday 01 January, 2009
Source: Backdoor Trojan: Backdoor.Win32.Prorat.K
Backdoor Trojan: Backdoor.Win32.SpyAgent.B
Rogue-Software: XP-Shield
Trickler: Trojan-Downloader.Win32.Delf.tbv
Trickler: Trojan.Downloader.Win32.Agent.bkwx
Trojan: PWS-QQGame
Trojan: PWS.Win32.Zbot.PJ
Trojan: Trojan.Win32.Agent.chgp
Trojan: Trojan.Win32.Buzus.AWGQ
Trojan: Trojan.Win32.Crypt.vb
Worm: Worm.Win32.AutoRun.aw
Worm: Worm.Win32.Sohanad.bm
Protection Provided by:
Who is Vulnerable? Microsoft Windows clients
Vulnerability Description The update includes new protections against 12 recent malware threats:

Backdoor Trojan: Backdoor.Win32.Prorat.K
Backdoor Trojan: Backdoor.Win32.SpyAgent.B
Rogue-Software: XP-Shield
Trickler: Trojan-Downloader.Win32.Delf.tbv
Trickler: Trojan.Downloader.Win32.Agent.bkwx
Trojan: PWS-QQGame
Trojan: PWS.Win32.Zbot.PJ
Trojan: Trojan.Win32.Agent.chgp
Trojan: Trojan.Win32.Buzus.AWGQ
Trojan: Trojan.Win32.Crypt.vb
Worm: Worm.Win32.AutoRun.aw
Worm: Worm.Win32.Sohanad.bm
Vulnerability DetailsMalware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network access to intrude upon organizations, destroying or stealing data.

Rogue Software is a software that uses Malware or malicious tools to advertise or install itself or to force computer users to pay for removal of nonexistent malware. Rogue software will often install a trojan horse to download a trial version, or it will execute other unwanted actions.

Tricklers are software designed to download and install malicious applications by running silently in the background to be less noticeable. Tricklers are typically used to install a spyware programs onto the victim's machine.

A Trojan horse is a program that installs malicious software while under the guise of doing something else.  Trojans are known for installing backdoor programs which allow unauthorized non permissible remote access to the victim's machine by unwanted parties with malicious intentions.

A Backdoor Trojan is a malicious application that opens a backdoor to a system.  A backdoor is a method of bypassing normal authentication, securing remote access to a computer, obtaining access to plaintext, and so on, while attempting to remain undetected. The backdoor may take the form of an installed program or could be a modification to an existing program.

Worms are malicious programs that spread themselves without any user intervention and have a self-replicating behavior. A Worm may consume a large amount of system resources and cause the machine to become unreliable. Moreover, some Worms may be used to compromise infected machines and download additional malicious software.

Protection Overview

×
  Feedback
This website uses cookies for its functionality and for analytics and marketing purposes. By continuing to use this website, you agree to the use of cookies. For more information, please read our Cookies Notice.
OK