As a provider of web based services and solutions, we are often asked how to protect computers
and networks from the increasing threats online.
Some of the key areas of concern raised are those of viruses, malware and increasingly spam which is why we became an AVG Authorized Reseller.
This enables us to bring you a market leading product with versions to cover all requirements. Coupled with its standard "2 year" licence and the
ability to allow maximum protection with minimum intervention or intrusion, AVG can provide a solution that is both secure and easy to use.
We have found it to be a real winner with all our clients regardless of technical ability.
Home Users
Looking to protect the PCs, Laptops and Notebooks in the home are offered
the opportunity to utilise the excellent value and complete peace of mind and cover for all your hardware.
This has now become even better with Identity Protection built in as standard.
Business Clients
As every business now relies on the internet for email, e-commerce and
communication, the risks from attack have increased greatly. You find yourself requiring protection across
an entire network, protecting you
users (who now use PCs, Laptops, Notebooks and Mobile devices) as well as Email and File Servers.
AVG protects all of these with its new range of business products targetted at
the User
.
Current Threats
I-Worm/Nuwar
Propagation method of new Nuwar variant is still similar to its precedessors. Spammed mails with link in IP format directs users to the worm web pages where the users are prompted to download one of the worm files with the name funny.exe. Names of other downloadable files are kickme.exe and foolsday.exe. AVG detects this threat as I-Worm/Nuwar.R.
Win32/Mabezat.A
In last few days we`ve registered a larger amount of PE files infected by this virus. Win32/Mabezat is polymorphic file infector which infects PE files. More information could be found in our Virus Encyclopedia.
Trojan Downloader.Agent.UZM
A new Trojan Downloader was spammed today. Trojan is attached in zip archive to emails in HTML format with subject "Hot game" and body text that claims some Angelina Jolie or Lara Croft undressing game. xgame.zip attachment contains xgame.exe (20992B) which drops executes and deletes kernel driver C:\WINDOWS\System32\drivers\runtime.sys and downloads another downloader smartdrv.exe. runtime.sys runs injects and hides Iexplore.exe process and downloads another components. xgame.exe is detected as Trojan Downloader.Agent.UZM, smartdrv.exe is detected as Trojan Downloader.Agent.UZN, runtime.sys is detected as Trojan Downloader.Agent.THW and other downloaded components are detected as several variants of Trojan Backdoor.Ntrootkit.
I-Worm/Stration downloader
Next Stration downloader variant spreads by email in messages with randomly generated subject and body with two attachments. PDF attachment is harmless but EXE attachment which is 18708B long is downloader itself and AVG detects it as I-Worm/Stration. More information about Stration worm familly can be found in the Virus Encyclopedia.
I-Worm/Stration downloader
Latest Stration downloader spreads by email in messages with randomly generated subject and body with one EXE and one PDF file attached. EXE file is 20992B in size and it`s downloader itself which is detected by AVG as I-Worm/Stration.FJA. The file downloader tryes to download is already detected as I-Worm/Stration. More information about Stration worm familly can be found in the Virus Encyclopedia.
Stration downloader
A new Stration downloader was seeded during todays morning using mail messages where subject and body are variable and which contains two attachments, one with pdf extension and second with exe extension which is 4096B in size and it`s downloader itself. AVG detect this threat as Trojan horse Downloader.Generic6.PFM. Downloader tryes to download and install Stration to affect system, but Stration download link is no longer active. More information about Stration worm familly can be found in the Virus Encyclopedia.
Win32/Virut
There were several new variants of Virut parasitic infector discovered in last days. We've added detection routines for this threat in last program update 7.5.484 so please update your AVG. Win32/Virut is polymorphic file infector which infects PE files with .exe extension. More information could be found in our Virus Encyclopedia.
Exploit.ANI
There is a new breed of threat against a vulnerability known for over a year in Cursor and Icon Format Handling described in MS05-002. Microsoft fixed this vulnerability already but the fix wasn`t complete. Affected systems are Windows NT, 2000, XP, 2003 and Vista. AVG detects all known variants of this exploit as Exploit.ANI.
BackDoor.Generic3.GBB and .GBC
Trojan horses BackDoor.Generic3.GBB and BackDoor.Generic3.GBC are almost similar. Both of them exploiting MS Windows Server Service vulnerability described in Microsoft Security Bulletin MS06-040 for it`s spreading. More information can be found in the Virus Encyclopedia.
AVI 271.1.1/4226 - new threats