Content

DAT Readme

Download the latest anti virus definitions for McAfee® VirusScan®. Ensure your McAfee® product contains the most up-to-date detection and prevention.
http://www.mcafee.com/apps/downloads/security_updates/dat.asp

DAT Version 4406
DAT Release Date 11/10/2004
Threats Detected 107076
New Detections 107
Enhanced Detections 802

Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

Noteworthy threats are those that had an Avert risk assessment of Low-Profiled, Medium, Medium-On-Watch, High, or High-Outbreak at the time of DAT release.

Noteworthy Threats:

Name Corporate Risk Assessment Home Risk Assessment
There are no noteworthy threats in this release

New Detections:

Program (13)
   (5)
    Dialer.inf
    Dialer.lnk
    VSource/crh2b
    Tool Source/crh2b
    VMag/crh2b
  Demonstration (1)
    Demo-Ownzed
  Dialer (1)
    Dialer-229
  Downloader (1)
    Proxy-OSS.dldr
  Joke (2)
    Joke-WinFormat
    Joke-Y2KCheck
  Tool (3)
    HTool-IMStorm
    Htool-BBind
    Tool-TPE
Trojan (61)
   (3)
    Vivax.txt
    Generic BackDoor.txt
    Eska
  Application extension (1)
    Downloader-RV.dll
  Configuration settings (1)
    BackDoor-QW.ini
  Dialer (1)
    QDial28
  Downloader (7)
    Downloader-RY
    Downloader-RW
    Downloader-RV
    Downloader-RT
    Downloader-DA.inf
    Downloader-RX
    Downloader-RU
  Dropper (3)
    MultiDropper-LU
    Backdoor-Maxload.dr
    BackDoor-CEP.dr
  Exploit (2)
    Exploit-IframeBO!shellcode
    Linux/Exploit-Maxload
  Generic (1)
    Downloader-QT.gen
  HTML document (1)
    Keylog-Stawin.html
  Malware Tool (2)
    UNIX/Kit-MOS
    NTRootKit-H
  Password Stealer (3)
    PWS-Bina.txt
    PWS-Ilg
    PWS-Altahia
  ProcKill (3)
    ProcKill-CD
    W97M/ProcKill-CE
    ProcKill-CC
  Proxy (2)
    Proxy-Torxy
    Proxy-Nocatch
  Remote Access (7)
    BackDoor-CKZ
    Backdoor-CKX
    BackDoor-CHD.b
    BackDoor-BDM!rar
    Backdoor-Maxload
    BackDoor-CKY
    Backdoor-CKW
  Script (12)
    Bat/qz140
    Bat/qd272
    Bat/qd271
    Bat/dt135
    Bat/avk34
    Bat/ZoneID
    Bat/qd270
    Bat/loop23
    Bat/exw21
    Bat/avk35
    Bat/avk33
    Sneaker.bat
  Source code (3)
    Downloader.src
    BackDoor-ADN.src
    Backdoor-Maxload.src
  StartPage (1)
    StartPage-FK
  Win32 (8)
    W32/Beagooz
    W32/Berlity
    Generic QHosts.b
    Generic StartPage.g
    Generic Downloader.k
    AdClicker-BK
    QLowZones-6
    AdClicker-BL
Virus (33)
   (1)
    HLLT.6272
  Application extension Worm (1)
    W32/Hpl.worm.dll
  Companion Generic (2)
    W32/Bee.cmp.gen
    W32/Egolet.cmp.gen
  Configuration settings (1)
    W32/Opaserv.ini
  Damaged (1)
    Flip.dam
  Damaged Demonstration (1)
    W32/KME.demo.dam
  Dropper (4)
    W32/Killis.dr
    W32/Dobom.dr
    W32/Crosser.dr
    W32/GBar.dr
  Email (2)
    W32/Riddle.b@MM
    W32/Riddle.a@MM
  Generic (3)
    VBS/Chick.gen
    W32/HLLP.4100.gen
    W32/Anaph.gen
  Generic Peer To Peer Worm (1)
    W32/Veedna.worm.gen!p2p
  Generic Worm (2)
    W32/Protoride.worm.gen
    W32/Klez.worm.gen
  Intended (1)
    W32/Flober.intd
  Script (3)
    Bat/hama
    Bat/Kazy
    W32/Fedix.bat
  Win32 (4)
    W32/Dongbot
    W32/Doser.4448
    W32/Bagle.z
    W32/Aegi
  Worm (6)
    W32/Shodi.worm.g
    W32/Shodi.worm.h
    W32/Sado.worm.d
    W32/Mensaj.worm
    W32/Hpl.worm
    W32/Gavir.worm

Enhanced Detections:

- (1)
  - (1)
    Unsafe Program
Internet Worm (1)
  P2P Worm (1)
    W32/Spybot.worm.lk
Malware (2)
  Exploit (2)
    Exploit-SQLhuc
    Exploit-IIS.Crack
Program (33)
   (6)
    Simulated Virus
    Tool Source/crh2a
    VSource/crh2a
    Tool Source/crh1
    VMag/crh2a
    V-HTM.d
  - (3)
    Iroffer
    SkServer
    Proxy-OSS
  Adware (10)
    Adware-SaveNow
    IPSentry
    Adware-HotBar
    Adware-HelpExpress
    Adware-Websearch
    Adware-HungryHands
    Adware-IESearchBar
    Adware-Adshooter
    Adware-Adroar
    Adware-Virtumundo
  Application extension (2)
    Proxy-OSS.dll
    PWS-ICQDecrypt.dll
  Dialer (1)
    Dialer-167
  Downloader (2)
    Adware-Rfwnad.dldr
    Downloader-NP
  HTTP/FTP Trans. (1)
    SlimFTP
  Malware Tool (1)
    VTool/tas99
  Password (1)
    PWDump
  Password Stealer (1)
    PWS-Madzumba
  PornDialer (1)
    Dialer-Generic
  Remote Access (1)
    ServU-Daemon
  Tool (1)
    HideRun
  Win32 (2)
    Packed mIRC Client
    Crack-StyleXP
Trojan (671)
   (17)
    Generic PWS.b
    Generic BackDoor.d
    Del-438
    AdClicker-AT
    AdClicker-AS
    AdClicker-AW
    AdClicker-AV
    HDBreak
    SearchHelp
    Generic PWS.c
    Wini
    HochuPiva
    AdClicker-BF
    AdClicker-BE
    ServU.txt
    Urbin
    QHosts-18!hosts
  - (8)
    AdClicker-O
    IRC/Flood.bi
    Socoten
    StartPage-B
    Phreak
    Zendown
    Conlock
    Uploader-P
  Application extension (55)
    CoreFlood.dll
    PWS-Gina.dll
    Downloader-EO.dll
    StartPage-AT.dll
    Xombe.dll
    Downloader-DA.dll
    PWS-LegMir.dll
    Spy-Tofger.dll
    PWS-Narod.dll
    BackDoor-CAY.dll
    PWS-Wincap.dll
    PWS-LDPinch.dll
    PWS-Bancban.dll
    AdClicker-AU.dll
    StartPage-EF.dll
    Keylog-Sconato.dll
    Keylog-Keylf.dll
    Downloader-EN.b.dll
    PWS-GWGhost.dll
    PWS-Hooker.dll
    Keylog-SCLog.dll
    PWS-IM.dll
    PWS-Pasorot.dll
    PWS-CL.dll
    CoolFool.dll
    Keylog-Stawin.dll
    Sepuc.dll
    Keylog-Ramb.dll
    PWS-Progent.dll
    Spy-Merries.dll
    PWS-QQPass.dll
    PWS-Executant.dll
    DDoS-Decill.dll
    Downloader-IG.dll
    Keylog-Memento.dll
    BackDoor-CHJ.dll
    Proxy-Mitglieder.dll
    StartPage-DU.dll
    Spy-Lydra.dll
    PWS-Seny.dll
    Downloader-EA.dll
    AdClicker-BC.dll
    StartPage-DH.dll
    StartPage-EC.dll
    PWS-Banker.dll
    Proxy-Redirector.dll
    Keylog-Mpi.dll
    StartPage-DP.dll
    Keylog-MXX.dll
    PWS-Cookie.dll
    Downloader-LG.dll
    AdClicker-AF.dll
    Spy-Agent.dll
    PWS-Dolche.dll
    Keylog-PP.dll
  Client (3)
    BackDoor-FB.cli
    BackDoor-VN.cli
    BackDoor-RV.cli
  Configurator (9)
    Keylog-GP.cfg
    MultiDropper-CC.cfg
    BackDoor-FB.cfg
    Generic PWS.c.cfg
    PWS-GWGhost.cfg
    BackDoor-CY.cfg
    BackDoor-RV.cfg
    ICQPager-B.cfg
    BackDoor-CEP.cfg
  Demonstration (3)
    W32/KME.demo
    Exploit-IframeBO.demo
    Exploit-MS04-028.demo
  Denial Of Svc (2)
    IRC/Flood.ak
    DDoS-Chessmess
  Disk erasing (1)
    QZap198
  Downloader (25)
    JS/Cisp
    Downloader-DC
    Downloader-GS
    Infectus
    Downloader-O
    Downloader-X.ldr
    Downloader-IQ
    Downloader-JF
    Downloader-NN
    Downloader-NH
    Downloader-NE
    Downloader-NZ
    Downloader-J
    Downloader-H
    Downloader-I
    Downloader-OR
    Downloader-OK
    Downloader-N
    Downloader-QT
    PWS-Bancban.dldr
    Downloader-PH
    Downloader-LV
    Downloader-LK
    Downloader-LP
    Downloader-LI
  Downloader Generic (1)
    Proxy-FBSR.gen.dldr
  Dropper (42)
    PWS-Bancos.dr
    MultiDropper-CE
    PWS-Bancban.dr
    PWS-LDPinch.dr
    IRC-Sdbot.dr
    BackDoor-Sub7.dr
    Generic PWS.c.dr
    BackDoor-SP.dr
    PWS-Hooker.dr
    MultiDropper-BW
    MultiDropper-BY
    BackDoor-BL.dr
    BackDoor-FK.dr
    Zendown.dr
    BackDoor-FR.dr
    BackDoor-FP.dr
    MultiDropper-BV
    BackDoor-KT.dr
    MultiDropper-KC
    MultiDropper-CI
    MultiDropper-CD
    MultiDropper-BL
    MultiDropper-BK
    MultiDropper-BJ
    MultiDropper-BH
    MultiDropper-CQ
    MultiDropper-CC
    MultiDropper-CB
    MultiDropper-BR
    MultiDropper-BI
    QDel194.dr
    PWS-Templar.dr
    PWS-Susanin.dr
    PWS-Puper.dr
    JS/PWS-DafDaf.dr
    PWS-Phreaker.dr
    PWS-Julia.dr
    BackDoor-UJ.dr
    BackDoor-NT.dr
    BackDoor-JX.dr
    Orifice2K.dr
    MultiDropper-LR
  Email (1)
    W32/Berlity@MM
  Exploit (10)
    VBS/Psyme
    Exploit-ByteVerify
    Exploit-JBellz
    Exploit-MhtRedir.gen
    Exploit-Sechole
    Exploit-Zephyrus
    Exploit-Vecnoit
    Exploit-MSNdel
    Exploit-MhtRedir
    Exploit-MS04-028
  File deleting (14)
    QDel192
    QDel363
    QDel219
    QDel202
    QDel197
    QDel194
    QDel181
    QDel179
    QDel208
    QDel201
    QDel193
    QDel190
    QDel184
    QDel180
  File Deletion (2)
    QDel373
    Ahero
  Flooder (32)
    FDoS-Atho.f
    FDoS-Atho.d
    FDoS-Atho.c
    FDoS-Atho.g
    FDoS-Atho.e
    FDoS-Atho.a
    FDoS-Polchat
    FDoS-ICQBomb
    FDoS-Atho.b
    FDoS-Atho.h
    FDoS-CrazyWorld
    FDoS-ChinBomb
    FDoS-Xinxin
    FDoS-Telhack
    FDoS-MarcelBomb.11
    FDoS-Kagra
    FDoS-Hirr
    FDoS-Gozi
    FDoS-TetriCrasher
    FDoS-PingToss
    FDoS-IScrewQ
    FDoS-ICQMsgBomb
    FDoS-Foundry
    FDoS-DBomber
    FDoS-Bcp
    FDoS-Xicq
    FDoS-POF
    FDoS-Muara
    FDoS-IRCNullnet
    FDoS-FonoBomber
    FDoS-Bombarder
    FDoS-Achis
  Generic (15)
    PWS-QQCave.gen
    VB-BackDoor.a.gen
    Fluxay.gen
    PWS-Mewey.gen
    PWS-Crazy.gen
    PWS-MSNFake.gen
    PWS-Yipper.gen
    PWS-AIM.gen
    PWS-QQcv.gen
    PWS-Harvester.gen
    VB-BackDoor.b.gen
    Exploit-ObjectData.gen
    Proxy-FBSR.gen
    PWS-Bancban.gen.c
    BackDoor-CHN.gen
  Heuristic (1)
    New Downloader
  ICQ Messaging (1)
    ICQ-Spy
  Internet Relay Chat (3)
    IRC-Zcrew
    IRC/Flood.cl
    IRC/Flood.as
  Keylogger (7)
    Keylog-GP
    Keylog-Kagra
    Keylog-ATh
    Keylog-BanBra
    Keylog-SKS
    Keylog-BCat
    Keylog-KWin
  Malware Tool (30)
    Spam-Yah
    Spam-FakeMail
    Nuke-Nukeit.z
    Nuke-Cyrus
    Nuke-Meliksah
    Nuke-Nukeit
    Nuke-Nukeit.o
    Nuke-Nukeit.n
    Kit-Vbswt
    Kit-Uck
    Kit-Tvbvk
    Nuke-Smurf
    Kit-EABC
    Kit-Dpog
    Nuke-Nukeit.ad
    VDxG.kit
    Nuke-SubAttack
    Nuke-Nucku
    Nuke-Nukeit.ac
    Nuke-Nukeit.aa
    Nuke-Nukeit.w
    Nuke-Nukeit.s
    Nuke-Maiz
    Nuke-Daath
    Kit-Expout
    Kit-DSGen
    Nuke-Nukeit.ab
    Nuke-Nukeit.x
    Nuke-Nukeit.v
    Nuke-Kabal
  Password (9)
    PWS-Bancos
    PWS-QQ.gen.b
    PWS-LegMir
    PWS-Truebf
    PWS-LDPinch
    PWS-Bancban
    Keylog-Razytimer
    PWS-RedNeck
    PWS-Septer
  Password Stealer (65)
    PWS-PWKiller
    PWS-Harvester
    PWS-Hooker
    PWS-Kadun
    PWS-ISPHack
    PWS-Elo
    PWS-QQGet
    PWS-AimSyn
    PWS-GinaStub
    PWS-Murka
    PWS-HE
    PWS-FN
    PWS-FC
    PWS-Fastlit
    PWS-QQDrag
    PWS-Sysrat
    PWS-IN
    PWS-QQ
    PWS-IP
    PWS-Firum
    PWS-Abaxo
    PWS-Zhliu
    PWS-Zaba
    PWS-Xnf
    PWS-USB
    PWS-Tornado
    PWS-SurNet
    PWS-Sprut
    PWS-Seratna
    PWS-Sels
    PWS-Rist
    PWS-QICQSpy
    PWS-Phreaker
    PWS-Morose
    PWS-MailTest
    PWS-M2
    PWS-Loser
    PWS-Julia
    PWS-Johar
    PWS-Huiz
    PWS-GOP
    PWS-FakeNuke
    PWS-Express
    PWS-Deat
    PWS-Ajan
    PWS-Zipper
    PWS-YDestroyer
    PWS-TheBat
    PWS-Templar
    PWS-Susanin
    PWS-Rocket
    PWS-Puper
    PWS-NSO
    PWS-Luxar
    PWS-Leshiy
    PWS-Flash
    PWS-Fib
    PWS-Dripper
    PWS-Dinf
    PWS-Ceda
    PWS-Barok
    PWS-DB
    PWS-Msl
    PWS-Zagahd
    PWS-EyeOnIE
  Plugin component (3)
    BackDoor-JX.plugin
    PWS-GOP.plugin
    Orifice2K.plugin.utl
  ProcKill (3)
    ProcKill-Y
    ProcKill-X
    Prockill-BY
  Proxy (5)
    Proxy-FBSR
    Proxy-CyArmy
    Proxy-Soring
    Proxy-Agent.a
    Proxy-TJServ
  Remote Access (123)
    BackDoor-IM
    BackDoor-AZV
    CoreFlood
    BackDoor-SP
    Backdoor-TW
    BackDoor-BL
    Backdoor-AFC
    IRC-Demfire
    BackDoor-GL
    BackDoor-CAY
    Backdoor-LG
    BackDoor-AKL
    BackDoor-UQ
    BackDoor-GO
    Backdoor-MV
    BackDoor-ALT
    BackDoor-VH
    BackDoor-QW
    BackDoor-UZ
    BackDoor-RL
    BackDoor-PB
    BackDoor-KO
    BackDoor-HX
    BackDoor-IC
    BackDoor-FF
    BackDoor-Sub7
    BackDoor-GZ
    Backdoor-QO
    BackDoor-JY
    BackDoor-N
    BackDoor-VD
    BackDoor-FB
    BackDoor-RF
    BackDoor-QQ
    BackDoor-MD
    BackDoor-MU
    BackDoor-RB
    BackDoor-QY
    BackDoor-PL
    BackDoor-NX
    BackDoor-NW
    BackDoor-LR
    BackDoor-KT
    BackDoor-KG
    BackDoor-IJ
    BackDoor-GJ
    BackDoor-DA
    BackDoor-CB
    BackDoor-ME
    BackDoor-FP
    BackDoor-CG
    BackDoor-BU
    BackDoor-UT
    BackDoor-AOZ
    BackDoor-UX
    BackDoor-US
    BackDoor-UL
    BackDoor-TC
    BackDoor-LT
    BackDoor-CAY!mem
    BackDoor-CHD
    BackDoor-ABQ
    BackDoor-VO
    BackDoor-VM
    BackDoor-VL
    BackDoor-VK
    BackDoor-VJ
    BackDoor-VI
    BackDoor-VG
    BackDoor-VF
    BackDoor-VC
    BackDoor-VA
    BackDoor-UY
    BackDoor-UW
    BackDoor-UU
    BackDoor-UR
    BackDoor-UP
    BackDoor-UN
    BackDoor-UM
    BackDoor-UI
    BackDoor-UH
    BackDoor-UG
    BackDoor-UF
    BackDoor-UC
    BackDoor-UA
    BackDoor-TZ
    BackDoor-TY
    BackDoor-TU
    BackDoor-TS
    BackDoor-TQ
    BackDoor-TN
    BackDoor-TK
    BackDoor-TH
    BackDoor-TD
    BackDoor-SY
    BackDoor-SW
    BackDoor-SV
    BackDoor-SU
    BackDoor-SA
    BackDoor-LQ
    BackDoor-LW
    BackDoor-UD
    BackDoor-UB
    BackDoor-TX
    BackDoor-TV
    BackDoor-TT
    BackDoor-TR
    BackDoor-TP
    BackDoor-TM
    BackDoor-TJ
    BackDoor-TG
    BackDoor-TB
    BackDoor-SZ
    BackDoor-QM
    BackDoor-OS
    BackDoor-CDC
    BackDoor-MK
    BackDoor-CJP
    BackDoor-CIU
    BackDoor-BDI
    BackDoor-P
    BackDoor-CES
    BackDoor-CEP
  Script (6)
    Bat/sdel
    IIS/BackDoor-ACE
    IRC-Demfire.bat
    IRC/Flood.ba.bat
    QDel271.bat
    BackDoor-BQ.bat
  Server (3)
    BackDoor-KT.svr
    BackDoor-VN.svr
    BackDoor-RV.svr
  Settings Change (3)
    Startpage-N
    StartPage-G
    Startpage-AI
  Spyware (2)
    Keylog-Perfect.dr
    Floid.dll
  StartPage (49)
    StartPage-F
    StartPage-CQ.gen
    StartPage-CM
    StartPage-AM
    StartPage-AK
    StartPage-AH
    StartPage-S
    StartPage-P
    StartPage-J
    StartPage-D
    StartPage-AL
    StartPage-AJ
    StartPage-AE
    StartPage-X
    StartPage-R
    StartPage-O
    StartPage-L
    StartPage-I
    StartPage-E
    StartPage-AZ
    StartPage-Z
    StartPage-BE
    StartPage-BD
    StartPage-BK
    StartPage-BH
    StartPage-BM
    StartPage-BN
    StartPage-BY
    StartPage-BV
    StartPage-BU
    StartPage-BZ
    StartPage-CI
    StartPage-CK
    StartPage-EH
    StartPage-EL
    StartPage-EO
    StartPage-EV
    StartPage-FI
    StartPage-EZ
    StartPage-EX
    StartPage-EA
    StartPage-DY
    StartPage-EB
    StartPage-DF
    StartPage-DE
    StartPage-DC
    StartPage-DT
    StartPage-CZ
    StartPage-FA
  Tool (1)
    Nuke-Nukeit.m
  Trojan (3)
    Somer
    QDel378
    Multidropper
  Win32 (114)
    Generic VB
    DoS-Bkill.b
    Generic PWS.a
    AdClicker-AA
    AdClicker-V
    AdClicker-Q
    AdClicker-Y
    AdClicker-T
    AdClicker-N
    AdClicker-K
    Lolaweb
    Generic Downloader.a
    Generic BackDoor.b
    DoS-Bkill.a
    AdClicker-AI
    Keylog-Laz
    AdClicker-J
    IPScan
    Seb
    DiskFill-M
    Generic Delphi
    QScreen6
    TestSpy
    FileThief
    BlackHole
    DoS-QQnukeall
    DirDrop
    AdClicker-L
    AdClicker-AE
    SpyTec
    Generic BackDoor.e
    QDel186
    BackDoor-FR
    Carfi
    SocksProxy
    ZoneKill
    WitchJoda
    Tenpar
    TecWin
    Wincheck
    Patchcon
    Keyspy
    DDoS-WarezX
    Ezoons
    Dpbot
    Perniw
    HLS
    DoS-Aspcode
    DoS-Fulame
    DoS-Ahbomb
    APCrack
    DiabloCheat
    Reboot-H
    Generic VB.b
    ElfNotify
    Generic PWS.f
    AdClicker-AK
    Generic StartPage.f
    Generic Downloader.j
    Viname
    Tembo
    SysObs
    Sydo.a
    Servex
    Q3Down
    Zspoof
    XYProj
    WinFlooder
    ViaHack
    Valvoline
    Teekiller
    SysRep32
    Sydo.b
    SBug
    Reboot-J
    Pricipal
    NetBus-Patch.11
    Mypic
    KobSpy
    Kident
    KeyLogger.d
    IIStorm
    GhostSpy
    Fuhd
    Folly
    Flare
    Pisatel
    Jusp
    Elpro
    ControlRS
    Capi
    Bruja
    Boomur
    Biggun
    ConSpy
    Bson
    Boscroll
    BadCo
    AntiAVG
    Rux
    Generic VB.c
    AdClicker-AL
    QLowZones-2
    Ponograph
    OLamer
    Oblom
    MySpy
    Khaos
    Gnotify
    AdClicker-BH
    Generic BackDoor.m
    DDoS-MobileBomb
    AdClicker-AN
    Generic Downloader.h
Virus (94)
   (2)
    Generated.Spirit.a
    Keypress.1232b
  Application extension (1)
    W32/Crypto.dll
  Damaged (2)
    W32/Enerlam.dam
    W32/Bagle.dam
  Damaged Worm (3)
    W32/Spybot.worm.dam
    W32/Gaobot.worm.dam
    W32/Sdbot.worm.dam
  Dropper (2)
    W32/Bolzano.dr
    W32/Tuareg.dr
  Dropper Worm (1)
    W32/Gaobot.worm.dr
  E-mail (4)
    W32/Bagle.j@MM
    W32/Bagle.k@MM
    W32/Bagle.af@MM
    W32/Bagle.ad@MM
  E-mail worm (9)
    W32/Bagle.n@MM
    W32/Bagle.p@MM
    W32/Bagle.q@MM
    W32/Bagle.t@MM
    W32/Bagle.c@MM
    W32/Bagle.r@MM
    W32/Bagle.s@MM
    W32/Bagle.aa@MM
    W32/Bagle.ah@MM
  Email (4)
    W32/Shodi.c@MM
    W32/Bagle.al@MM
    W32/BleBla@MM
    W32/Anaph.12291@MM
  File Infector (2)
    MPB/Kynel
    Generic
  Generic (2)
    W32/Bagle!eml.gen
    W32/Mkar.gen
  Generic Worm (21)
    W32/Sdbot.worm.gen.b
    W32/Sdbot.worm.gen
    W32/Spybot.worm.gen.e
    W32/Gaobot.worm.gen.g
    W32/Gaobot.worm.gen.f
    W32/Gaobot.worm.gen.e
    W32/Sdbot.worm.gen.w
    W32/Spybot.worm.gen.f
    W32/Spybot.worm.gen.a
    W32/Gaobot.worm.gen.l
    W32/Spybot.worm.gen.h
    W32/Sdbot.worm.gen.l
    W32/Sdbot.worm.gen.j
    W32/Sdbot.worm.gen.h
    W32/Sdbot.worm.gen.k
    W32/Sdbot.worm.gen.i
    W32/Sdbot.worm.gen.x
    W32/Sdbot.worm.gen.y
    W32/Sdbot.worm.gen.u
    W32/Sdbot.worm.gen.t
    W32/Sdbot.worm.gen.p
  Heuristic (6)
    New AOL
    New BackDoor4
    New BackDoor1b
    New BackDoor2
    New BackDoor3
    New BackDoor1
  Internet Worm (4)
    W32/Sdbot.worm
    W32/Bagle.d@MM
    JS/Fortnight@M
    W32/Gaobot.worm.gen.q
  Macintosh (2)
    MacOS/ANTI.b
    MacOS/ANTI.a
  mIRC Worm (1)
    W32/Protoride.worm
  Overwriting (1)
    Univ.ow/a
  Parasitic (1)
    W32/HLLP.36864
  Script (1)
    Bat/a
  Win32 (16)
    New Win32.g1
    New Poly Win32
    W32/Bagle.o!proxy
    W32/Bagle.aj!proxy
    W32/Crypto
    New Win32
    W32/Enerlam
    W32/Evol
    W32/Generic.d
    W32/GBar
    W32/Bagle.an
    W32/Bagle.ao
    W32/Zelly
    W32/Dobom
    W32/Killis
    W32/Generic.Delphi
  Win9x (1)
    W95/Blakan
  Worm (8)
    W32/Shodi.worm.a
    W32/Darby.worm
    W32/Shodi.worm.b
    W32/Shodi.worm.f
    W32/Shodi.worm.d
    W32/Sdbot.worm!ftp
    W32/Shodi.worm.e
    W32/Wallon.worm!eml