Top 10 Spyware list for September

Top 10 threats reported by our customers.

1. Randomly Named DLL
File Found: “C:\WINDOWS\bgrqfetx.dll”
Reg Entry: (BHO) “{F111361E-EBF9-458C-81C3-20783A38200D}”

2. Randomly Named EXE
File Found: “C:\WINDOWS\system32\lphcgvrj0e7ea.exe”
Reg Entry: (Run) “lphcgvrj0e7ea”

3. Vundo
File Found: “C:\WINDOWS\system32\efcAPIBt.dll”
Reg Entry: (WinNotify) “…\CurrentVersion\Winlogon\Notify\efcAPIBt”

4. Zlob
File Found: “C:\Program Files\Applications\iebt.dll”
Reg Entry: (BHO) “{CFEE97A3-4911-444D-8BE8-E243A23D3DE2}”

5. Virus Response Lab 2009
File Found: “C:\Program Files\VirusRL2009\VirusRL2009.exe”
Reg Entry: (Run) “VirusRL2009″

6. XP/Vista Antivirus 2009
File Found: “C:\WINDOWS\system32\algg.exe”
Reg Entry: (Run) “wblogon”

7. Antivirus XP
File Found: “C:\WINDOWS\system32\brastk.exe”
Reg Entry: (Run) “brastk” 

8. Trojan Fake Alert
File Found: “C:\WINDOWS\system32\KARINA.dat”
AppInit_DLLs Entry: (BHO) “Karina.dat”

9. New Threat
File Found: “C:\WINDOWS\system32\oesdhvat.dll & C:\WINDOWS\System32\rundll32.exe”
Reg Entry: (Run) “304b175c”

10. Agent ANA Trojan
Detected RegKey Entry:  “software\tdss”
Detected RegKey Entry:  “software\microsoft\windows nt\currentversion\tdssdata”

Jerome