Content

DAT Readme

Download the latest anti virus definitions for McAfee® VirusScan®. Ensure your McAfee® product contains the most up-to-date detection and prevention.
http://www.mcafee.com/apps/downloads/security_updates/dat.asp

Latest Update
DAT Version 5155
DAT Release Date 11/02/2007
Threats Detected 339285
New Detections 163
Enhanced Detections 98

Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.

Noteworthy threats are those that had an Avert risk assessment of Low-Profiled, Medium, Medium-On-Watch, High, or High-Outbreak at the time of DAT release.

Noteworthy Threats:

Name Corporate Risk Assessment Home Risk Assessment
There are no noteworthy threats in this release

New Detections:

Program (1)
   (1)
    ASF ScriptObject-b
Trojan (53)
   (5)
    Taz-b
    Saveset-b
    Lockdir-b
    Suspicious IFrame-c
    Teacher-b
  Downloader (3)
    New Downloader-b
    Sniff-Systrim.ldr-b
    Downloader-FR-b
  Dropper (4)
    MultiDropper-DD-b
    BackDoor-FR.dr-b
    MultiDropper-EZ-b
    MultiDropper-BV-b
  Exploit (8)
    JS/Exploit-Navigat-b
    Exploit-Gator-b
    JS/Exploit-DDay-b
    JS/Exploit-DragDro-b
    JS/Exploit-Applet-b
    Exploit-NoCheat-b
    JS/Exploit-BO
    Exploit-MBServer
  File deleting (1)
    QDel278-b
  Generic (3)
    VB-QDel.gen-b
    W32/Stealth.gen-b
    JS/Spth.gen-b
  Heuristic (7)
    Unsafe Bat-b
    New UNIX-b
    New Downloader.b-b
    New IRC dropper-b
    New PornDial-b
    New Malware-d
    New Linux Malware-b
  Linux (1)
    Linux/Flooder-b.slice2
  Password Stealer (3)
    PWS-Ourgame-b
    PWS-Kervar-b
    PWS-Niksi-b
  Remote Access (1)
    BackDoor-AHB-b
  Script (3)
    X97M/Pathetic.bat-b
    IRC/Flood.bat-c
    Bat/rbt-b
  Unix (1)
    Unix/BFishy-b
  Win31 (1)
    Skin-b
  Win32 (12)
    J-Melissa-b
    Timese-b
    SPrem-b
    Wimip
    TFiller-b
    Shinop-b
    Fotki-b
    AdClicker-I-b
    PirDir-b
    Lotto-b
    FakeAlert-W
    AdClicker-FQ
Virus (109)
   (39)
    Tourist.1871-b
    Malatinec.1554-b
    Apocalypse.1414.d-b
    Suspicious IFrame-b
    Glaurung.1109-b
    Bifurcator.1648.d-b
    YD.837-b
    VCG.Belka-b
    Magick-b
    Kxx.519-b
    Findme.235-b
    VCL.541-b
    HLL.13419.app-b
    Carnage-b
    SSR.19834-b
    SysInf.512x.dd-b
    SSR-b
    Trident-b
    Sirius.139-b
    Jeru.1653e-b
    Xany.162-b
    Vas.GFT.2153-b
    Beda-b
    Lucretia-b
    HLLT.7504b-b
    Crow-b
    ARCV.Ice.1060-b
    Wood Goblin.dd-b
    Mad.5131-b
    Zynto.1704-b
    Wood Goblin-b
    Stdout-b
    Mirrorx.4100-b
    Mutagen-b
    Lapiddan-b
    Vector-b
    Intruder.1313-b
    Path.547b-b
    Bomber.4096-b
  Application extension (1)
    New Win32.dll-b
  Companion (1)
    Sahand.cmp.2382-b
  Damaged (8)
    Blurp.4733.dam-b
    W32/Klez.dam-b
    Danish Tiny.dam-b
    ARCV.Ice.dam-b
    Yade.dam-b
    Perko.1277.dam-b
    Zielona.2576.dam-b
    W95/Henky.dam-b
  Email (1)
    VBS/HacVan@MM-b
  Exploit (1)
    VBS/Exploit-AM-b
  Heuristic (29)
    New AOL-b
    New PE-d
    New BackDoor4-b
    New Bat-b
    New VBS.b-b
    New Perl-b
    New P2P Worm-b
    New Malware-b
    New Win32.g3-b
    New Win32.tls-b
    New Floppy Worm-b
    New W97M Dropper-b
    New X97M Worm-b
    New VBA Dropper-b
    New VBA Worm-b
    New W97M Worm-b
    New Script.ext-b
    New Win32.g1-b
    New JS-b
    New Script.f-b
    New BackDoor1-b
    New Win32.g2-b
    New DLL-b
    New PE-c
    New VB-b
    New Win32.s-b
    New X97M Dropper-b
    New Worm-b
    New Worm-c
  Macintosh (1)
    MacOS/T4.d-b
  Macro (3)
    X97M/Laroux-b
    W97M/Concept-b
    remnants-X97M/Toraja
  multipartite (4)
    Nutcracker.mp.dd-b
    Red Vixen.mp-b
    Natas.mp-b
    Nutcracker.mp-b
  Parasitic (5)
    Lesson.apd-b
    Dichotomy.apd-b
    After.266.apd-b
    Mutint.603.apd-b
    Danish Tiny.apd-b
  Peer To Peer (1)
    W32/Generic.c!p2p-b
  Registry (1)
    W32/Tuareg-b
  Script (2)
    VBS/Zulu.vbs-b
    Bat/bvc-b
  Unix (1)
    UNIX/ZQ-b
  Win32 (5)
    W32/Gobi-b
    W32/Heffer.app-b
    W32/Demig-b
    W32/Stepan-b
    W32/Bolzano-b
  Win9x (1)
    W95/Klunky-b
  Worm (5)
    Linux/Lion.worm-b
    VBS/HPWG.worm-b
    Linux/Adore.worm-b
    Bat/Primad.worm-b
    W32/Autorun.worm.al

Enhanced Detections:

Malware (1)
  Trojan (1)
    Voterai
Program (7)
  - (1)
    Generic Dialer
  Adware (1)
    Adware-PigSearch
  Demonstration (1)
    W97/Exploit-SpyField.demo
  Keylogger (1)
    Keylog-Ardamax.dll
  Tool (2)
    Tool-TCPScan
    Tool-SQLScan
  Win32 (1)
    Winfixer
Trojan (71)
   (6)
    Generic.ds
    Generic.ep
    Generic.df
    Generic Flooder
    Generic.dc
    Generic.f
  - (2)
    Generic Malware.a
    Spam-Mailbot
  Application extension (2)
    BackDoor-WB.dll
    PWS-QQPass.dll
  Configuration file (1)
    Generic!atr
  Downloader (3)
    Downloader.gen.a
    PWS-Banker.dldr
    Downloader-BAI!M711
  Dropper (2)
    Generic Dropper
    Downloader-ABO.dr
  Exploit (7)
    VBS/Psyme
    Exploit-IFrame
    Exploit-CreateTxtRng
    Exploit-ObscuredHtml
    Exploit-HlpImg
    Exploit-CodeBase.chm
    JS/Exploit-Favorites
  Generic (7)
    PWS-Banker.gen.ad
    DNSChanger.gen
    Generic.dx
    PWS-Mmorpg.gen
    loosky.gen
    hackerdefender.gen
    Tibs-Packed
  Heuristic (2)
    New Malware.ae
    New Malware-e
  Password (2)
    PWS-LegMir
    PWS-LDPinch
  Password Stealer (6)
    Generic PWS.d
    PWS-LegMir.dll
    PWS-Banker
    PWS-Banker.gen.i
    PWS-OnlineGames.a
    PWS-Lineage
  Remote Access (11)
    Generic BackDoor
    BackDoor-AMQ
    BackDoor-BAC
    BackDoor-AWQ
    BackDoor-CKB.sys
    BackDoor-CQN
    BackDoor-CMQ
    BackDoor-CYT
    BackDoor-CMI
    BackDoor-CKB
    BackDoor-CEP
  Settings Change (1)
    Generic StartPage
  Win32 (19)
    HackerDefender
    Generic Downloader.c
    Muster
    Spy-Agent.bg
    Generic Exploit
    Puper
    Spy-Agent.bw
    Generic PWS.y
    Generic Downloader.y
    Generic RootKit.a
    Generic PWS.o
    Generic AdClicker.a
    Generic BackDoor.u
    Generic Downloader.ab
    Vundo
    Generic.dd
    Generic.cc
    Generic Dropper.w
    Generic AdClicker.d
Virus (19)
  Downloader (1)
    W32/Stration.dldr
  E-mail worm (1)
    W32/Generic.a@MM
  Email (2)
    W32/Stration@MM
    W32/Nuwar@MM
  Email Generic (2)
    W32/Netsky.gen@MM
    W32/Mytob.gen@MM
  Generic (1)
    W32/Feebs.gen
  Heuristic (1)
    New Win32.g4
  Internet Worm (1)
    W32/Sdbot.worm
  mIRC Worm (1)
    W32/Generic.worm!irc
  Overwriting (1)
    W32/RAHack
  VbScript (1)
    New Script
  Win32 (4)
    New Win32.g5
    New Win32.g6
    W32/Generic.x
    W32/Generic.Delphi.c
  Worm (3)
    W32/Generic.worm.b
    W32/Autorun.worm.g
    W32/Autorun.worm.ad