SpyHunter Threat Database Update 6.11

SpyHunter defs version 6.11 (08/24/2007)
Latest Program version: 2.9.5018

The following new parasites have been added:

Worm.AceBot
Acebot, also known as Worm.Win32.Newbiero.04, is a network worm that creates a backdoor through which a hacker can control your PC. Acebot spreads over open network shares. When it is executed, it will configure Windows to automatically run Acebot on startup. It will then connect to an IRC channel in order to receive commands from a remote attacker. This worm is designed to pass through several commercial firewall programs without detection. This worm is extremely dangerous, as it allows access to any sensitive personal and financial data stored on your PC.

BestsellerAntivirus
BestsellerAntivirus is a rogue antivirus program that is often downloaded and installed by Trojans, through browser security exploits, or via other nefarious mechanisms. BestsellerAntivirus launches on Windows startup and may generate excessive popup adverts. It will also display notifications of imaginary security risks in its attempts to get the user to purchase the full version. This program can be extremely difficult to remove manually, and will continue to try to recreate itself. This progarm is known to be affiliated with the Zlob/VideoAccess Trojan.

CheaterChecker
CheaterChecker is a spyware keylogger application. This application records every keystroke that you type on your computer, and hides itself from the user by running in stealth mode. CheaterChecker can be configured to automatically take screenshots at a preset time interval. It can be configured to log every web page that you visit and will also record all keystrokes that you type, as well as any instant messenger and email conversations. This program is a severe violation of your privacy and the safety of your personal and financial data, including banking information and credit card numbers.

Worm.Zhelatin.GQ
Zhelatin is an email worm that propagates as a spam email attachment. Once installed on your system, the worm will employ rootkit techniques in an attempt to prevent detection. It will attempt to add your PC to an IRC Botnet, and will then use your PC to send spam emails. Infected email messages will be sent to all email addresses that the worm is able to find on your computer.

Trojan.Agent-APH
Trojan.Agent-APH is designed to infiltrate your computer and steal personal information. This Trojan includes a keylogger which records every keystroke that you type. This malware is extremely dangerous, and poses a significant threat to the security of any personal and financial information stored on your computer.

Worm.Banwarum
Banwarum is a mass mailer worm that replicates itself onto other computers through email attachments. The worm will send emails to any emails that it can find on your PC. It will add itself as an attachment to these emails. It uses its own SMTP engine to send these messages. This worm is also known to spread through networks by exploiting the a Microsoft Windows ASN.1 Library Vulnerability. This worm will open a HTTP backdoor through which a hacker can access your PC.

Bleah
Bleah is a virus that affects the system master boot record. This virus is extremely dangerous, and should be removed immediately.

Worm.Cholera
Cholera, aka Win32.CTX, is a polymorphic virus that affects Windows systems. This virus originates from Spain, and is similar to Marbug and Parvo viruses. This virus searches any .HTM, .TXT, .EML, .DBX, .MBX, .NCH, and .IDX files on your computer for email addresses. It then connects to your default SMTP server and transmits itself to any email addresses that it was able to locate.

Virus.Elkern.c
Elkern is a Windows virus. This virus, once loaded into memory, will set itself to run each time Windows starts. The virus will remain in memory and infect any processes that it files that do not have the word "explorer" in their names.

Backdoor.SDBot
SDBot is a Trojan virus. Once installed on Windows, SDBot will allow a hacker to connect to and control your PC through IRC. SDBot also contains a self-updating feature. This program opens up a huge security hole on your computer and is a very dangerous threat to the security of your personal and financial data.

Virus.Elkern.a
Elkern is a Windows virus. This virus, once loaded into memory, will set itself to run each time Windows starts. The virus will remain in memory and infect any processes that it files that do not have the word "explorer" in their names.

Worm.Klez
Klez is a mass mailer worm that replicates itself onto other computers through email attachments. The worm will send emails to any emails that it can find on your PC. It will add itself as an attachment to these emails. This worm is also known to spread through network shares.

Email-Worm.VBS.Gedza
Gedza is a worm virus that spreads through email, network shares, P2P file sharing programs, and IRC. Once executed, Gedza will attempt to infect Word and Excel documents on your system with a VBS macro virus. This worm is known to cause frequent crashes. This virus may also display a JPG image of Avril Lavigne. Gedza will also display annoying messages, based on date. This virus is believed to originate from Spain.

Worm.Brontok
Brontok is a worm virus, believed to originate in Indonesia, which affects Windows. Once executed, Brontok will add itself to the registry, in order to auto-start each time Windows starts. It will disable the Windows Registry Editor and modify Windows Explorer settings. Brontok will disable Windows Firewall and will also prevent you from viewing hidden files and system files. The virus will attempt to email itself to any addresses that it can find on your PC.

The following threats were updated:

Trojan.Downloader.Agent-BN
PCSecureSystem
Zlob.VideoAccess
AntivirusPCSuite
AntiSpyGolden
AntivirusGold
MalwareBurn
MalwareWiped
Zlob.Trojan
SpyHeal
VirusHeal
VirusProtectPro
AntiVermins
Trojan.Downloader
ErrClean
Trojan.Vundo
Backdoor.Agobot.ABL
Trojan.Downloader-Small
WinFixer
SpyShredder
WinAntiVirus Pro 2007
SpywareQuake
Trojan.Downloader.Contravirus
Toolbar888