• There seems to be an uptick in Political comments in recent months. Those of us who are long time members of the site know that Political and Religious content has been banned for years. Nothing has changed. Please leave all political and religious comments out of the forums.

    If you recently joined the forums you were not presented with this restriction in the terms of service. This was due to a conversion error when we went from vBulletin to Xenforo. We have updated our terms of service to reflect these corrections.

    Please note any post refering to a politician will be considered political even if it is intended to be humor. Our experience is these topics have a way of dividing the forums and causing deep resentment among members. It is a poison to the community. We appreciate compliance with the rules.

    The Staff of SOH

  • Server side Maintenance is done. We still have an update to the forum software to run but that one will have to wait for a better time.

Trojan On Page 118 of Simviation

Devildog73

SOH Staff
Staff member
My Norton just deleted a trojan: Pidief.F and a downloader virus in bh[1].pdf from that page.

I was looking through aircraft to see if they had anything I had missed and it popped up as soon as I hit page 118.

BEWARE
Here is the detail:
Discovered: May 22, 2009
Updated: May 22, 2009 10:03:15 PM
Also Known As: Troj/Hackda-A [Sophos]
Type: Trojan
Infection Length: 84,054 bytes
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000
CVE References: CVE-2009-0927

Trojan.Pidief.F is a Trojan horse that opens a back door on the compromised computer and exploits the Adobe Acrobat and Reader Collab 'getIcon()' JavaScript Method Remote Code Execution Vulnerability (BID 34169)

Protection

  • Initial Rapid Release version May 22, 2009 revision 025
  • Latest Rapid Release version November 13, 2009 revision 025
  • Initial Daily Certified version May 22, 2009 revision 039
  • Latest Daily Certified version November 13, 2009 revision 033
  • Initial Weekly Certified release date May 27, 2009
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy
Damage

  • Damage Level: Low
  • Payload: Drops a back door on the compromised computer.
  • Degrades Performance: Exploitation of the remote vulnerability may degrade performance.
Distribution

  • Distribution Level: Low
Writeup By: Nino Gutierrez
 
It used this to get onto Simviation's site.

Discovered: June 8, 2001
Updated: February 13, 2007 11:50:11 AM
Type: Trojan Horse
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP



Downloader connects to the Internet and downloads other Trojan horses or components.

Note: Virus definitions dated June 1, 2006 or earlier may detect this threat as Download.Trojan.
Protection

  • Initial Rapid Release version June 11, 2001
  • Latest Rapid Release version November 14, 2009 revision 037
  • Initial Daily Certified version June 11, 2001 revision 007
  • Latest Daily Certified version November 14, 2009 revision 020
  • Initial Weekly Certified release date June 13, 2001
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy
Damage

  • Damage Level: Low
Distribution

  • Distribution Level: Low
Writeup By: Gor Nazaryan
 
Back
Top