Content

DAT Readme

Download the latest anti virus definitions for McAfee® VirusScan®. Ensure your McAfee® product contains the most up-to-date detection and prevention.
http://www.mcafee.com/apps/downloads/security_updates/dat.asp

DAT Version 4342
DAT Release Date 03/24/2004
Threats Detected 87978
New Detections 123
Enhanced Detections 318

Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

Noteworthy threats are those that had an Avert risk assessment of Low-Profiled, Medium, Medium-On-Watch, High, or High-Outbreak at the time of DAT release.

Noteworthy Threats:

Name Corporate Risk Assessment Home Risk Assessment
W32/Witty.worm Low-Profiled Low-Profiled
W32/MyWife.a@MM Low-Profiled Low-Profiled
W32/Snapper@MM Low-Profiled Low-Profiled
W32/Cone.f@MM Low-Profiled Low-Profiled

New Detections:

Internet Worm (1)
  Exploit (1)
    W32/Witty.worm
Program (6)
  Adware (3)
    Adware-Apropos
    Adware-Onban
    Adware-NNBar
  Application extension (1)
    Adware-Onban.dll
  Dialer (1)
    Dialer-192
  HTTP/FTP Trans. (1)
    Dustbunny
Trojan (8)
  - (1)
    IRC-Deport
  Downloader (1)
    Downloader-IF
  Dropper (1)
    MultiDropper-GP.d
  Exploit (3)
    Exploit-Knox
    Exploit-Gtkftpd
    Exploit-Lhs
  Generic (1)
    PWS-Bancban.gen.b
  StartPage (1)
    StartPage-CH
Virus (37)
  Dropper (1)
    W32/Kuang.dr
  E-mail (2)
    W32/MyWife.a@MM
    W32/Cone.f@MM
  Generic Worm (1)
    W32/Gaobot.worm.iq.gen
  Internet Worm (1)
    W32/Snapper@MM
  Macro (2)
    X97M/Bobmon
    W97M/CZero
  Win32 (21)
    W32/Gobi
    W32/Polybot.v
    W32/Polybot.t
    W32/Polybot.s
    W32/Polybot.r
    W32/Polybot.q
    W32/Polybot.o
    W32/Polybot.n
    W32/Polybot.m
    W32/Polybot.k
    W32/Polybot.j
    W32/Polybot.i
    W32/Polybot.h
    W32/Polybot.g
    W32/Polybot.f
    W32/Polybot.e
    W32/Polybot.c
    W32/Polybot.a
    W32/Polybot.u
    W32/Polybot.d
    W32/Polybot.b
  Worm (9)
    W32/Gaobot.worm.ui
    W32/Gaobot.worm.ug
    W32/Gaobot.worm.ua
    W32/Gaobot.worm.tn
    W32/Gaobot.worm.ti
    W32/Lovgate.s@MM
    W32/Gaobot.worm.um
    W32/Gaobot.worm.uj
    W32/Windang.worm

Enhanced Detections:

Trojan (20)
  Adware (1)
    Gpix
  Application extension (1)
    Keylog-Chast.dll
  Denial Of Svc (1)
    IRC/Flood.av
  Downloader (1)
    Downloader-HX
  Dropper (2)
    Uploader-E.dr
    IRC-Xdem.dr
  Exploit (1)
    Exploit-Mailto
  Generic (2)
    BackDoor-WB.gen
    FDoS-Flooder.gen
  Heuristic (1)
    New PWS.b
  Internet Relay Chat (1)
    IRC/Flood.eb
  Keylogger (1)
    Keylog-Chast
  Password Stealer (1)
    PWS-Trillian
  Remote Access (2)
    BackDoor-ANG
    BackDoor-ATM
  Script (2)
    Bat/Karal
    Bat/qd235
  Win32 (3)
    Downloader-W
    Uploader-E
    DDoS-PopSer
Virus (208)
   (63)
    Dark Avenger.1865.d
    Dark Avenger.1865.e
    Sunny.2288
    Shanghai.4077
    Seventh Son.327
    Seventh Son.333c
    Seventh Son.254
    Seventh Son.283
    Seventh Son.473b
    Seventh Son.440
    Seventh Son.426
    Seventh Son.350b
    Seventh Son.334
    Seventh Son.332c
    Seventh Son.332a
    Seventh Son.284e
    Seventh Son.284c
    Seventh Son.284b
    Seventh Son.284a
    Seventh Son.281
    Seventh Son.271b
    Seventh Son.268
    Seventh Son.344
    Seventh Son.333b
    Seventh Son.253
    Seventh Son.331
    Seventh Son.473a
    Seventh Son.428
    Seventh Son.424
    Seventh Son.350a
    Seventh Son.333
    Seventh Son.332b
    Seventh Son.286
    Seventh Son.284d
    Seventh Son.271a
    Peach.887
    Dark Avenger.ag
    Dark Avenger.m
    Dark Avenger.l
    Dark Avenger.Singapore
    Dark Avenger.k
    Dark Avenger.j
    Dark Avenger.1832b
    Lemming.2029
    Dark Avenger.1449
    Dark Avenger.n
    Dark Avenger.1813
    Dark Avenger.i
    Dark Avenger.1802a
    Dark Avenger.HLT
    Dark Avenger.1693
    Dark Avenger.h
    Dark Avenger.g
    Dark Avenger.f
    Dark Avenger.1947
    Dark Avenger.ai
    Dark Avenger.aj
    Dark Avenger.e
    Dark Avenger.d
    Dark Avenger.c
    Dark Avenger.b
    Dark Avenger.a
    Dark Avenger.1365
  Application extension Worm (1)
    W32/Spybot.worm.dll
  Dropper (2)
    Friday13.dr
    MGTU.273.dr
  Email (5)
    Arica@MM
    W32/Cone.d@MM
    W32/Cone.c@MM
    W32/Cone.b@MM
    W32/Cone.a@MM
  Email Generic (1)
    W32/Cone.gen@MM
  File Infector (4)
    MGTU
    Dark Avenger
    Jerusalem
    Lemming
  Generic (4)
    VBS/Dismissed.gen
    Tic.GR
    Suriv.GR
    Kalah.GR
  Generic Worm (2)
    W32/Gaobot.worm.gr
    W32/Doomer.worm.gen
  Internet Relay Chat (1)
    IRC/Generic
  Macro (2)
    W97M/Bablas
    W97M/Ostrich.gen
  Remote Access (1)
    W95/Kuang.gen
  Win32 (4)
    W32/Zmist.gen
    W32/Hortiga.b
    W32/Hortiga.a
    W32/Toto
  Worm (118)
    W32/Gaobot.worm.dx
    W32/Gaobot.worm.dv
    W32/Gaobot.worm.dt
    W32/Gaobot.worm.do
    W32/Gaobot.worm.dm
    W32/Gaobot.worm.dj
    W32/Gaobot.worm.dh
    W32/Gaobot.worm.df
    W32/Gaobot.worm.dd
    W32/Gaobot.worm.db
    W32/Gaobot.worm.cz
    W32/Gaobot.worm.cx
    W32/Gaobot.worm.ct
    W32/Gaobot.worm.cr
    W32/Gaobot.worm.cn
    W32/Gaobot.worm.ck
    W32/Gaobot.worm.ci
    W32/Gaobot.worm.ce
    W32/Gaobot.worm.cc
    W32/Gaobot.worm.ca
    W32/Gaobot.worm.bx
    W32/Gaobot.worm.jc
    W32/Gaobot.worm.ip
    W32/Gaobot.worm.il
    W32/Gaobot.worm.ii
    W32/Gaobot.worm.hz
    W32/Gaobot.worm.bv
    W32/Gaobot.worm.bs
    W32/Gaobot.worm.bq
    W32/Gaobot.worm.bo
    W32/Gaobot.worm.bn
    W32/Gaobot.worm.bt
    W32/Gaobot.worm.br
    W32/Gaobot.worm.bm
    W32/Gaobot.worm.bl
    W32/Gaobot.worm.bj
    W32/Gaobot.worm.bh
    W32/Gaobot.worm.bg
    W32/Gaobot.worm.az
    W32/Gaobot.worm.ay
    W32/Gaobot.worm.an
    W32/Gaobot.worm.x
    W32/Gaobot.worm.v
    W32/Gaobot.worm.t
    W32/Gaobot.worm.m
    W32/Gaobot.worm.f
    W32/Gaobot.worm.av
    W32/Gaobot.worm.jh
    W32/Gaobot.worm.im
    W32/Gaobot.worm.ik
    W32/Gaobot.worm.ig
    W32/Gaobot.worm.hx
    W32/Gaobot.worm.ho
    W32/Gaobot.worm.hj
    W32/Gaobot.worm.hh
    W32/Gaobot.worm.hb
    W32/Gaobot.worm.hc
    W32/Gaobot.worm.gx
    W32/Gaobot.worm.gu
    W32/Gaobot.worm.gs
    W32/Gaobot.worm.gq
    W32/Gaobot.worm.gk
    W32/Gaobot.worm.gh
    W32/Gaobot.worm.gd
    W32/Gaobot.worm.ft
    W32/Gaobot.worm.fq
    W32/Gaobot.worm.hr
    W32/Gaobot.worm.hi
    W32/Gaobot.worm.hf
    W32/Gaobot.worm.he
    W32/Gaobot.worm.ha
    W32/Gaobot.worm.gl
    W32/Gaobot.worm.gj
    W32/Gaobot.worm.gg
    W32/Gaobot.worm.ga
    W32/Gaobot.worm.fz
    W32/Gaobot.worm.fv
    W32/Gaobot.worm.fs
    W32/Gaobot.worm.fp
    W32/Gaobot.worm.fi
    W32/Gaobot.worm.fg
    W32/Gaobot.worm.fc
    W32/Gaobot.worm.et
    W32/Gaobot.worm.er
    W32/Gaobot.worm.em
    W32/Gaobot.worm.ei
    W32/Gaobot.worm.ef
    W32/Gaobot.worm.ed
    W32/Gaobot.worm.ff
    W32/Gaobot.worm.eu
    W32/Gaobot.worm.es
    W32/Gaobot.worm.ep
    W32/Gaobot.worm.el
    W32/Gaobot.worm.eg
    W32/Gaobot.worm.ee
    W32/Gaobot.worm.ec
    W32/Gaobot.worm.ea
    W32/Gaobot.worm.dz
    W32/Gaobot.worm.dy
    W32/Gaobot.worm.dw
    W32/Gaobot.worm.du
    W32/Gaobot.worm.ds
    W32/Gaobot.worm.dn
    W32/Gaobot.worm.dk
    W32/Gaobot.worm.di
    W32/Gaobot.worm.dg
    W32/Gaobot.worm.de
    W32/Gaobot.worm.dc
    W32/Gaobot.worm.cy
    W32/Gaobot.worm.cu
    W32/Gaobot.worm.cs
    W32/Gaobot.worm.cq
    W32/Gaobot.worm.cm
    W32/Gaobot.worm.ch
    W32/Gaobot.worm.cd
    W32/Gaobot.worm.cb
    W32/Gaobot.worm.by
    W32/Gaobot.worm.bw