Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
953 entries found. Displaying page 3 of 48.
Updated on Feb 18, 2005
Windows Defender Antivirus detects and removes this threat.
 
Trojan:Win32/Goweh is a Trojan that alters several settings in Internet Explorer, changing the default home page and redirecting search queries and traffic to other Web pages.  
Alert level: severe
Updated on Feb 21, 2005
Windows Defender Antivirus detects and removes this threat.
 
Win32/Sober is a family of mass-mailing worms that targets certain versions of Microsoft Windows.
 
The worm sends itself as an attachment to email addresses that it finds in files on the infected PC. The worm is activated when a user opens the attachment.
Alert level: severe
Updated on Apr 20, 2005
Microsoft security software detects and removes this family of threats.
 
This family of backdoor trojans can give a malicious hacker access and control of your PC. They connect to an internet relay chat (IRC) server to receive commands from the hacker. 
 
They can then spread to other PCs, launch denial of service (DoS) attacks, and collect information about your PC.
Alert level: high
Updated on Jun 23, 2005
Windows Defender Antivirus detects and removes this threat.
 
This family of backdoor trojans can record which keys you press and send this information to a malicious hacker. They can also use your PC in distributed denial of service (DDos) attacks.
Alert level: severe
Updated on Jun 27, 2005
Windows Defender Antivirus detects and removes this threat.
 
Win32/Optix is a family of highly configurable backdoor trojans that targets several versions of Microsoft Windows. The Trojan opens a backdoor that allows an attacker to control an infected PC remotely. It can also release system information to an attacker and disable security-related and other programs. 
Alert level: severe
Updated on Aug 17, 2005
Windows Defender Antivirus detects and removes this threat.
 
Win32/Zotob is a network worm that primarily targets Microsoft Windows 2000 computers that do not have Microsoft Security Bulletin MS05-039 installed. MS05-039 patches the Windows Plug-and-Play buffer overflow vulnerability.
 
Win32/Zotob can also infect computers running other Windows operating systems if it is delivered through email, instant messaging, or other routes. The worm has a backdoor component that connects to an IRC server to receive commands from attackers.
Alert level: severe
Updated on Aug 18, 2005
Windows Defender Antivirus detects and removes this threat.
 
Win32/Bobax is a family of mass-mailing network worms that target certain versions of Microsoft Windows.
 
The worm can spread by sending a copy of itself as an attachment to email addresses gathered from an infected computer. It can also spread by exploiting several Windows vulnerabilities. The worm can download and run malicious files from Web sites, and can also open a backdoor to give attackers access to use the infected computer.
Alert level: severe
Updated on Aug 19, 2005
Windows Defender Antivirus detects and removes this threat.
 
Worm:Win32/Esbot is a family of network worms that targets Microsoft Windows 2000 computers by exploiting the Windows Plug-and-Play buffer overflow vulnerability that is fixed with Microsoft Security Bulletin MS05-039. The worm can also infect computers running other Windows operating systems if it is delivered through e-mail, instant messaging, or other routes. The worm has a backdoor component that connects to an IRC server to receive commands from attackers.
Alert level: severe
Updated on Nov 27, 2005
Windows Defender Antivirus detects and removes this threat.
 
Win32/Bofra is a mass-mailing worm that can infect computers running Microsoft Windows. The worm creates a Web server on the infected computer. It sends a copy of itself to any user who connects to the server and requests a URL containing a certain string. The worm also connects to an IRC server to receive commands from attackers. Win32/Bofra terminates immediately if the system time is after December 15, 2004, 02:28:57.
Alert level: severe
Updated on Jan 25, 2006
Windows Defender Antivirus detects and removes this threat.
 
Win32/Alcan is a worm that spreads via peer-to-peer networking applications.  It may prevent system utilities from working and/or infect the PC with other malware.
Alert level: high
Updated on Apr 11, 2006
Win32/Valla is a virus that appends itself to executable files on an infected computer.
Alert level: high
Updated on May 03, 2006
Microsoft security software detects and removes this virus.

The virus infects executable files, such as files with a .exe extension. When an infected file runs, the virus tries to run the original content of the file while it infects other executable files on your PC.

This threat might have got on your PC if you inserted a removable disk or accessed a network connection that was infected.

Find out ways that malware can get on your PC.  

Alert level: high
Updated on May 04, 2006
Windows Defender Antivirus detects and removes this threat.
 
Win32/Cissi is a mass-mailing and network worm with a backdoor component. The worm can spread to remote NetBIOS shares by trying weak account name and password combinations. Some variants of the worm can gather email addresses from the infected computer and send a copy of the worm to those addresses as an e-mail attachment. Win32/Cissi has an additional component that connects to an IRC server to serve as a backdoor.
Alert level: high
Updated on May 05, 2006
Windows Defender Antivirus detects and removes this threat.
 
Win32/Ganda is a mass-mailing worm that targets Microsoft Windows.
 
The worm sends a copy of itself as an e-mail attachment to email addresses that it finds on the infected computer. The e-mail may be in English or Swedish. The worm infects the computer when the user opens the attachment. Win32/Ganda can also exploit the Windows vulnerability described in Microsoft Security Bulletin MS01-020. Win32/Ganda.A@mm has a file-infector component that infects PE executable files.
Alert level: high
Updated on Dec 07, 2006
Alert level: severe
Updated on Dec 08, 2006
Alert level: severe
Updated on Apr 16, 2007
The Win32/Renos family automatically downloads unwanted software such as SpySheriff, SpyAxe, SpyFalcon, SpyDawn, SpywareStrike, and other similarly named programs. These programs typically present erroneous warnings claiming the system is infected with spyware and offer to remove the alleged spyware for a fee. In some cases, the programs may also cause system instability.
Alert level: high
Updated on Jun 20, 2007
Windows Defender Antivirus detects and removes this threat.
 
Win32/Busky is a family of Trojans that monitor and redirect Internet traffic, gather system information and download unwanted software such as Win32/Renos and Win32/SpySheriff. Win32/Busky may be installed by a Web browser exploit or other vulnerability when visiting a malicious Web site.
Alert level: high
Updated on Jul 30, 2007

Windows Defender detects and removes this threat.

This virus family can give a malicious hacker access to your PC by opening a backdoor connection to an IRC server.

Find out ways that malware can get on your PC.

Alert level: severe
Updated on Sep 07, 2007
Win32/Nuwar refers to a family of Trojan droppers that install a distributed peer-to-peer (P2P) downloader Trojan. This downloader Trojan in turn downloads a copy of the email worm component of Win32/Nuwar.
Alert level: high