Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
787 entries found. Displaying page 19 of 40.
Updated on Aug 22, 2005
Worm:Win32/Esbot.D is a network worm that targets Microsoft Windows 2000 computers by exploiting the Windows Plug-and-Play buffer overflow vulnerability that is fixed with Microsoft Security Bulletin MS05-039. The worm can also infect computers running other Windows operating systems if it is delivered through e-mail, instant messaging, or other routes. The worm has a backdoor component that connects to an IRC server to receive commands from attackers.
Alert level: severe
Updated on Aug 23, 2005
Worm:Win32/Zotob.I is a mass-mailing network worm. The worm targets computers running Microsoft Windows 2000 by exploiting the Plug-and-Play vulnerability fixed in Microsoft Security Bulletin MS05-039. The worm also spreads through e-mail by sending a copy of itself as an attachment to e-mail addresses found on the infected computer. Worm:Win32/Zotob.I has a backdoor component that connects to an IRC server to receive commands from attackers.
Alert level: severe
Updated on Sep 12, 2005
Worm:Win32/Zotob.J is a network worm that targets Microsoft Windows 2000 computers by exploiting the Windows Plug-and-Play buffer overflow vulnerability that is fixed with Microsoft Security Bulletin MS05-039. The worm can also infect computers running other Windows operating systems if it is delivered through e-mail, instant messaging, or other routes. The worm has a backdoor component that connects to an IRC server from the infected computer to receive commands from attackers.
Alert level: severe
Updated on May 04, 2006
Win32/Cissi.A is a network worm with a backdoor component. The worm can spread through remote shares by trying weak account name and password combinations. The backdoor component connects to an IRC server, allowing it to accept and execute remote queries and commands. Win32/Cissi.A also gathers e-mail addresses from the infected computer, but cannot send a copy of itself to those addresses due to a bug in the worm's code.
Alert level: severe
Updated on Jul 12, 2006
Worm:Win32/Alcan.B is a worm that spreads via peer-to-peer networking applications.  It may prevent system utilities from working and/or infect the computer with other malicious  software.
Alert level: severe
Updated on Dec 07, 2006
Alert level: severe
Updated on May 09, 2005
Win32/Klez is a family of mass-mailing network worms that targets certain versions of Microsoft Windows. It can spread through mapped drives, network shares, executable files, and e-mail. Some Win32/Klez variants infect executable files. Win32/Klez also drops the Win32/Elkern virus to infect executable files.
Alert level: severe
Updated on Sep 15, 2005
Windows Defender Antivirus detects and removes this threat.
 
Win32/Gibe is a family of mass-mailing network worms that targets certain versions of Microsoft Windows. 
 
The worm spreads primarily by sending a copy of itself as an attachment to e-mail addresses found on the infected computer. It can also spread through writeable network shares, IRC channels, and peer-to-peer network file sharing.
Alert level: severe
Updated on Jan 26, 2007
TrojanDownloader:Win32/Stration.gen is generic detection for a family of trojans that download and run variants of the Win32/Stration worm. Win32/Stration is a family of mass-mailing email worms that send themselves to addresses obtained from a wide range of file types found on the infected system. The e-mail message composed by the worm may masquerade as a failure message or as a scanning tool.
Alert level: severe
Updated on Jan 26, 2007
TrojanDownloader:Win32/Stration.gen is generic detection for a family of trojans that download and run variants of the Win32/Stration worm. Win32/Stration is a family of mass-mailing email worms that send themselves to addresses obtained from a wide range of file types found on the infected system. The e-mail message composed by the worm may masquerade as a failure message or as a scanning tool.
Alert level: severe
Updated on Jan 26, 2007
TrojanDropper:Win32/Stration.gen is generic detection for a family of trojans that download and run variants of the Win32/Stration worm. Win32/Stration is a family of mass-mailing email worms that send themselves to addresses obtained from a wide range of file types found on the infected system. The e-mail message composed by the worm may masquerade as a failure message or as a scanning tool.
Alert level: severe
Updated on Jan 26, 2007
Win32/Stration.gen is generic detection for a family of mass-mailing email worms that send themselves to addresses obtained from a wide range of file types found on the infected system. The e-mail message composed by the worm may masquerade as a failure message or as a scanning tool. Win32/Stration.gen also acts as a Trojan downloader, attempting to download a file from a remote website. The downloaded file may be another variant of the Win32/Stration family.
Alert level: severe
Updated on Jun 01, 2007
TrojanDownloader:Win32/Stration.D is generic detection for a family of trojans that download and run variants of the Win32/Stration worm. Win32/Stration is a family of mass-mailing email worms that send themselves to addresses obtained from a wide range of file types found on the infected system. The e-mail message composed by the worm may masquerade as a failure message or as a scanning tool.
Alert level: severe
Updated on Jul 13, 2007
TrojanDropper:Win32/Stration.gen is generic detection for a family of trojans that download and run variants of the Win32/Stration worm. Win32/Stration is a family of mass-mailing email worms that send themselves to addresses obtained from a wide range of file types found on the infected system. The e-mail message composed by the worm may masquerade as a failure message or as a scanning tool.
Alert level: severe
Updated on Jul 13, 2007
TrojanDropper:Win32/Stration!ZIP is generic detection for a family of trojans that download and run variants of the Win32/Stration worm. Win32/Stration is a family of mass-mailing email worms that send themselves to addresses obtained from a wide range of file types found on the infected system. The e-mail message composed by the worm may masquerade as a failure message or as a scanning tool.
Alert level: severe
Updated on Jul 26, 2007
Windows Defender Antivirus detects and removes this threat.
 
This threat can install other malware on your PC, rename some files, and modify your Internet Explorer settings.
 
It usually arrives on your PC in a spam email attachment.
Alert level: severe
Updated on Aug 22, 2023
Alert level: severe
Updated on Jul 20, 2004
Win32/Randex.G is a minor variant of Win32/HLLW.Randex.D. It is a network worm that targets computers running certain versions of Microsoft Windows. The major difference between this variant and Win32/Randex.D runs is that this variant contacts the attacker by sending a UDP packet to a different IP address. 
Alert level: severe
Updated on Jul 21, 2004
Win32/Randex.I is a network worm that targets computers running certain versions of Microsoft Windows. The worm randomly scans IP addresses to spread to writeable network shares that have weak passwords. The worm also has backdoor capabilities that allow attackers to control an infected computer through an IRC channel.
Alert level: severe
Updated on Jul 21, 2004
Win32/Randex.J is a network worm that targets computers running certain versions of Microsoft Windows. The worm attempts to spread to other computers by scanning IP addresses at random for writeable network shares with weak passwords. The worm also has backdoor capabilities that allow attackers to control the infected computer through an IRC channel.
Alert level: severe