Content

DAT Readme

Download the latest anti virus definitions for McAfee® VirusScan®. Ensure your McAfee® product contains the most up-to-date detection and prevention.
http://www.mcafee.com/apps/downloads/security_updates/dat.asp

Latest Update
DAT Version 4991
DAT Release Date 03/23/2007
Threats Detected 238230
New Detections 16
Enhanced Detections 318

Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

Noteworthy threats are those that had an Avert risk assessment of Low-Profiled, Medium, Medium-On-Watch, High, or High-Outbreak at the time of DAT release.

Noteworthy Threats:

Name Corporate Risk Assessment Home Risk Assessment
MultiDropper-RL Low-Profiled Low-Profiled

New Detections:

Trojan (8)
   (1)
    Generic.abg
  Downloader (1)
    Downloader-BBE
  Dropper (1)
    MultiDropper-RL
  Generic (1)
    Downloader-AAP.gen.b
  Heuristic (2)
    New Malware.bm
    New Malware.bl
  Win32 (2)
    W32/Generic.aav!worm
    Spy-Agent.bx
Virus (8)
  Email (1)
    W32/Lovecan@MM
  Parasitic (3)
    W32/HLLP.Philis.il
    W32/HLLP.Philis.ij
    W32/HLLP.Philis.ik
  Win32 (4)
    W32/Sality.ab
    W32/Expiro.a
    W32/Expiro.b
    W32/Drowor

Enhanced Detections:

Internet Worm (2)
  Internet Relay Chat (2)
    W32/Sdbot.worm!7AF3267C
    W32/Sdbot.worm!811a7027
Program (4)
  Adware (3)
    Adware-Gain
    Adware-LinkMaker
    Adware-Alexa
  Spyware (1)
    Spyware-RealSpy
Trojan (111)
   (9)
    Generic.dw
    Generic.dv
    Generic.dy
    Generic.dx
    Generic MultiDropper.f
    Generic Flooder
    Generic.dz
    FakeAlert-B
    Generic Script
  - (1)
    Spam-Mailbot
  Application extension (3)
    PWS-Maran.dll
    PWS-Gamania.dll
    PWS-Lineage.dll
  Application extension Generi (1)
    Puper.dll.gen
  Configuration settings (1)
    HackerDefender.ini
  Damaged (1)
    BackDoor-AWQ.b.dam
  Downloader (11)
    Downloader-AYD
    Downloader-AAP
    PWS-WoW.dldr
    Downloader-ZQ.a
    Downloader-AWX
    PWS-Banker.dldr
    Downloader-BAI!M711
    Downloader-ZQ
    JS/Downloader-ASH
    Downloader-ASH
    Downloader-ARL
  Dropper (6)
    MultiDropper-FD
    BackDoor-DIX.dr
    Puper.dr
    PWS-Lineage.dr
    MultiDropper-LX
    PWS-WoW.dr
  Exploit (2)
    Exploit-MS01-034
    Exploit-ObjectBuffer
  Generic (5)
    PWS-Yipper.gen
    BackDoor-BAC.gen
    PWS-JA.gen
    Puper.gen
    PWS-Banker.gen.bc
  Heuristic (26)
    New Malware.d
    New Malware.am
    New Malware.bi
    New Malware.bg
    New Malware.be
    New Malware.ao
    New Malware.ak!zip
    New Malware.al!enc
    New Malware.an
    New Malware.ax
    New Malware.bd
    New Malware.az
    New Malware.ay
    New Malware.aw
    New Malware.aj
    New Malware.bk
    New Malware.ag
    New Malware.ah
    New Malware.ai
    New Malware.bh
    New Malware.bf
    New Malware.w
    New Malware.aq
    New Malware.av
    New Malware.ar
    New Malware.ap
  HTML (1)
    JS/Winbomb
  Internet Relay Chat (1)
    IRC/Flood.eq
  Password (1)
    Generic PWS
  Password Stealer (14)
    Generic PWS.e
    PWS-Gamania
    PWS-JA
    PWS-Banker
    PWS-Maran
    PWS-MMThief
    PWS-Banker.gen.ba
    PWS-Hachilem
    PWS-Banker.gen.i
    PWS-Bluedit
    PWS-Banker.gen.aa
    PWS-Gogo.sys
    PWS-WoW
    PWS-Lineage
  Proxy (1)
    Proxy-Piky
  Remote Access (5)
    Generic BackDoor
    BackDoor-AWQ.b
    BackDoor-AWQ
    BackDoor-DIX
    BackDoor-DIV
  Script (1)
    Generic component
  Settings Change (1)
    Generic StartPage
  Spyware (1)
    MailSkinner
  Trojan (1)
    Spy-Agent.ba
  Win32 (18)
    Generic VB
    Generic Delphi
    Generic Downloader.ak
    Generic Downloader
    Timese
    Generic Downloader.d
    Generic MultiDropper.a
    QLowZones-42
    FakeAlert-C
    Puper
    Generic Downloader.s
    Spy-Agent.bw
    Generic Dropper.p
    Generic Downloader.q
    Generic PWS.o
    Generic Downloader.ab
    Vundo
    Generic StartPage.r
Virus (201)
  Downloader (1)
    W32/Bagle.ey.dldr
  Dropper (1)
    W32/HLLP.Philis.dr
  Dropper Worm (1)
    W32/Sdbot.worm.dr
  Email (3)
    W32/Stration@MM
    W32/Bagle.ez@MM
    VBS/Edibara@M
  Email Generic (1)
    JS/Feebs.gen.x@MM
  Generic (2)
    W32/HLLP.Philis.gr
    W32/Bagle.gen
  Generic Worm (11)
    W32/Sdbot.worm.gen.h
    W32/Sdbot.worm.gen.i
    W32/Sdbot.worm.gen.x
    W32/Sdbot.worm.gen.ce
    W32/Sdbot.worm.gen.ca
    W32/Sdbot.worm.gen.ag
    W32/Sdbot.worm.gen.ax
    W32/Sdbot.worm.gen.bh
    W32/Sdbot.worm.gen.by
    W32/Sdbot.worm.gen.bx
    W32/Sdbot.worm.gen.z
  Internet Relay Chat Worm (1)
    W32/Sdbot.worm.gen.cc
  Internet Worm (2)
    W32/Sdbot.worm
    W32/Sdbot.worm!MS05-039
  Parasitic (168)
    W32/HLLP.Philis
    W32/HLLP.Philis.cj
    W32/HLLP.Philis.bs
    W32/HLLP.Philis.fq
    W32/HLLP.Philis.ga
    W32/HLLP.Philis.gd
    W32/HLLP.Philis.gz
    W32/HLLP.Philis.hk
    W32/HLLP.Philis.hr
    W32/HLLP.Philis.hx
    W32/HLLP.Philis.hv
    W32/HLLP.Philis.ea
    W32/HLLP.Philis.if
    W32/HLLP.Philis.cs
    W32/HLLP.Philis.cq
    W32/HLLP.Philis.em
    W32/HLLP.Philis.dg
    W32/HLLP.Philis.ih
    W32/HLLP.Philis.bw
    W32/HLLP.Philis.bu
    W32/HLLP.Philis.fz
    W32/HLLP.Philis.ef
    W32/HLLP.Philis.hh
    W32/HLLP.Philis.hf
    W32/HLLP.Philis.dy
    W32/HLLP.Philis.hz
    W32/HLLP.Philis.fa
    W32/HLLP.Philis.hc
    W32/HLLP.Philis.gh
    W32/HLLP.Philis.hd
    W32/HLLP.Philis.hq
    W32/HLLP.Philis.bv
    W32/HLLP.Philis.gx
    W32/HLLP.Philis.ex
    W32/HLLP.Philis.ez
    W32/HLLP.Philis.cl
    W32/HLLP.Philis.ha
    W32/HLLP.Philis.dx
    W32/HLLP.Philis.bq
    W32/HLLP.Philis.cm
    W32/HLLP.Philis.db
    W32/HLLP.Philis.dw
    W32/HLLP.Philis.da
    W32/HLLP.Philis.dv
    W32/HLLP.Philis.gq
    W32/HLLP.Philis.ho
    W32/HLLP.Philis.fj
    W32/HLLP.Philis.bm
    W32/HLLP.Philis.ca
    W32/HLLP.Philis.ic
    W32/HLLP.Philis.ib
    W32/HLLP.Philis.ia
    W32/HLLP.Philis.cz
    W32/HLLP.Philis.gi
    W32/HLLP.Philis.gf
    W32/HLLP.Philis.cr
    W32/HLLP.Philis.cp
    W32/HLLP.Philis.do
    W32/HLLP.Philis.dn
    W32/HLLP.Philis.ce
    W32/HLLP.Philis.cd
    W32/HLLP.Philis.by
    W32/HLLP.Philis.gv
    W32/HLLP.Philis.hj
    W32/HLLP.Philis.he
    W32/HLLP.Philis.fd
    W32/HLLP.Philis.fc
    W32/HLLP.Philis.gu
    W32/HLLP.Philis.hp
    W32/HLLP.Philis.ee
    W32/HLLP.Philis.ec
    W32/HLLP.Philis.eb
    W32/HLLP.Philis.dm
    W32/HLLP.Philis.hi
    W32/HLLP.Philis.ed
    W32/HLLP.Philis.ck
    W32/HLLP.Philis.bx
    W32/HLLP.Philis.gk
    W32/HLLP.Philis.gl
    W32/HLLP.Philis.ge
    W32/HLLP.Philis.en
    W32/HLLP.Philis.el
    W32/HLLP.Philis.fn
    W32/HLLP.Philis.hn
    W32/HLLP.Philis.eu
    W32/HLLP.Philis.et
    W32/HLLP.Philis.eq
    W32/HLLP.Philis.es
    W32/HLLP.Philis.er
    W32/HLLP.Philis.ep
    W32/HLLP.Philis.fl
    W32/HLLP.Philis.du
    W32/HLLP.Philis.dk
    W32/HLLP.Philis.di
    W32/HLLP.Philis.bp
    W32/HLLP.Philis.eh
    W32/HLLP.Philis.dt
    W32/HLLP.Philis.cy
    W32/HLLP.Philis.ej
    W32/HLLP.Philis.ei
    W32/HLLP.Philis.bt
    W32/HLLP.Philis.ch
    W32/HLLP.Philis.ci
    W32/HLLP.Philis.id
    W32/HLLP.Philis.ie
    W32/HLLP.Philis.gn
    W32/HLLP.philis.hb
    W32/HLLP.Philis.hy
    W32/HLLP.Philis.ig
    W32/HLLP.Philis.gm
    W32/HLLP.Philis.dq
    W32/HLLP.Philis.ev
    W32/HLLP.Philis.fb
    W32/HLLP.Philis.fh
    W32/HLLP.Philis.ff
    W32/HLLP.Philis.dl
    W32/HLLP.Philis.dj
    W32/HLLP.Philis.dh
    W32/HLLP.Philis.dp
    W32/HLLP.Philis.fi
    W32/HLLP.Philis.fr
    W32/HLLP.Philis.gw
    W32/HLLP.Philis.fg
    W32/HLLP.Philis.fe
    W32/HLLP.Philis.fk
    W32/HLLP.Philis.ht
    W32/HLLP.Philis.hm
    W32/HLLP.Philis.ds
    W32/HLLP.Philis.cc
    W32/HLLP.Philis.bz
    W32/HLLP.Philis.eg
    W32/HLLP.Philis.eo
    W32/HLLP.Philis.cx
    W32/HLLP.Philis.df
    W32/HLLP.Philis.fp
    W32/HLLP.Philis.fx
    W32/HLLP.Philis.gc
    W32/HLLP.Philis.gt
    W32/HLLP.Philis.hg
    W32/HLLP.Philis.cn
    W32/HLLP.Philis.gs
    W32/HLLP.Philis.gy
    W32/HLLP.Philis.hl
    W32/HLLP.Philis.ii
    W32/HLLP.Philis.ft
    W32/HLLP.Philis.gp
    W32/HLLP.Philis.fm
    W32/HLLP.Philis.fu
    W32/HLLP.Philis.gj
    W32/HLLP.Philis.fw
    W32/HLLP.Philis.fv
    W32/HLLP.Philis.fs
    W32/HLLP.Philis.hw
    W32/HLLP.Philis.hu
    W32/HLLP.Philis.hs
    W32/HLLP.Philis.ew
    W32/HLLP.Philis.go
    W32/HLLP.Philis.cv
    W32/HLLP.Philis.ct
    W32/HLLP.Philis.de
    W32/HLLP.Philis.dc
    W32/HLLP.Philis.gb
    W32/HLLP.Philis.cw
    W32/HLLP.Philis.cu
    W32/HLLP.Philis.dd
    W32/HLLP.Philis.co
    W32/HLLP.Philis.cg
    W32/HLLP.Philis.cf
  Script (1)
    VBS/IE-Title
  VbScript (1)
    New Script
  Win32 (3)
    W32/Sality.z
    W32/Sality.aa
    W32/Piggi
  Worm (5)
    W32/HLLP.Philis.gg
    W32/MoonLight.worm
    W32/YahLover.worm
    W32/Mandei.worm
    W32/Opanki.worm