Trojan On Page 118 of Simviation

Devildog73

Devildog73

SOH Staff
Staff member
My Norton just deleted a trojan: Pidief.F and a downloader virus in bh[1].pdf from that page.

I was looking through aircraft to see if they had anything I had missed and it popped up as soon as I hit page 118.

BEWARE
Here is the detail:
Discovered: May 22, 2009
Updated: May 22, 2009 10:03:15 PM
Also Known As: Troj/Hackda-A [Sophos]
Type: Trojan
Infection Length: 84,054 bytes
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000
CVE References: CVE-2009-0927

Trojan.Pidief.F is a Trojan horse that opens a back door on the compromised computer and exploits the Adobe Acrobat and Reader Collab 'getIcon()' JavaScript Method Remote Code Execution Vulnerability (BID 34169)

Protection

  • Initial Rapid Release version May 22, 2009 revision 025
  • Latest Rapid Release version November 13, 2009 revision 025
  • Initial Daily Certified version May 22, 2009 revision 039
  • Latest Daily Certified version November 13, 2009 revision 033
  • Initial Weekly Certified release date May 27, 2009
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy
Damage

  • Damage Level: Low
  • Payload: Drops a back door on the compromised computer.
  • Degrades Performance: Exploitation of the remote vulnerability may degrade performance.
Distribution

  • Distribution Level: Low
Writeup By: Nino Gutierrez
 
It used this to get onto Simviation's site.

Discovered: June 8, 2001
Updated: February 13, 2007 11:50:11 AM
Type: Trojan Horse
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP



Downloader connects to the Internet and downloads other Trojan horses or components.

Note: Virus definitions dated June 1, 2006 or earlier may detect this threat as Download.Trojan.
Protection

  • Initial Rapid Release version June 11, 2001
  • Latest Rapid Release version November 14, 2009 revision 037
  • Initial Daily Certified version June 11, 2001 revision 007
  • Latest Daily Certified version November 14, 2009 revision 020
  • Initial Weekly Certified release date June 13, 2001
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy
Damage

  • Damage Level: Low
Distribution

  • Distribution Level: Low
Writeup By: Gor Nazaryan
 
You must log in or register to reply here.
Back
Top