Dangerous worms, latest versions of Lovgate.AE & AH

Discussion in 'NOD32 version 2 Forum' started by owziee, Jul 8, 2004.

Thread Status:
Not open for further replies.
  1. owziee

    owziee Registered Member

    Joined:
    Oct 3, 2003
    Posts:
    74
    owziee, Jul 8, 2004
    #1
  2. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    163,888
    Location:
    Texas

    NOD knows worms. Doesn't hurt to watch what you are doing.


    NOD32 - v.1.803 (20040705)
    Virus signature database updates:
    IRC/SdBot.AXM, Win32/Agobot.3.AHL, Win32/Agobot.3.AHM, Win32/Bagle.AD, Win32/Bagle.drp.gen, Win32/Dedler.R, Win32/IRCBot.ML, Win32/Lovgate.AJ, Win32/Lovgate.AK, Win32/Lovgate.AL, Win32/Lovgate.AM, Win32/Lovgate.AN, Win32/Lovgate.AO, Win32/MSN.VB.L, Win32/Rbot.AY, Win32/Rbot.AZ, Win32/Rbot.Z1, Win32/Spyboter.NAF, Win32/Spyboter.NAG, Win32/StartPage.JR, Win32/TrojanDownloader.VB.AH, Win32/Tumbi.Y, Win32/Tumbi.Z, Win32/VB.JV

    NOD32 - v.1.804 (20040705)
    Virus signature database updates:
    Asmah.A, Buendia.F, Chesu.A, Evow.A, HTML/Exploit.Mht.C, HTML/Exploit.Mht.G, IRC/SdBot.AXN, JS/TrojanDownloader.Stern.A, JS/TrojanDownloader.Weis.C, VBS/TrojanDropper.Inor.BB, Win32/Bonorm.A, Win32/Dumador.AJ, Win32/HackAgent.B, Win32/HackAgent.C, Win32/HackAgent.D, Win32/Keco.F, Win32/Keco.G, Win32/KillAV.CQ, Win32/Lovgate.AP, Win32/Mydoom.M, Win32/Nihilit.U, Win32/Nihilit.V, Win32/Nvrdoc.A, Win32/PeepViewer.202.NAC, Win32/Protoride.V, Win32/Protoride.W, Win32/Rbot.BA, Win32/Riler.A, Win32/Silva.A, Win32/Silva.B, Win32/Silva.C, Win32/Silva.D, Win32/SpyBot.AFV, Win32/Yosenio.A, Xjan.B

    NOD32's impressive list of firsts includes these widespread and destructive "big name" viruses and worms like CIH, Klez, Badtrans, Bugbear, Sobig, Mimail, Slammer, LoveLetter, Melissa, Marburg, Kournikova, Lovegate, Homepage, Nimda, Lirva, Swen, Opaserv, Sircam, Sober, Yaha, and many many more - all detected and blocked on first sight, without needing an update!!!
     
    ronjor, Jul 8, 2004
    #2
  3. owziee

    owziee Registered Member

    Joined:
    Oct 3, 2003
    Posts:
    74
    Well I can't see Lovgate.AE or Lovgate.AH anywhere in your post o_O
     
    owziee, Jul 8, 2004
    #3
  4. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    163,888
    Location:
    Texas

    It's possible that it is called by another name at Eset. Or they haven't entered this sig yet.

    You should be protected using heuristics was my point.
     
    ronjor, Jul 8, 2004
    #4
  5. steve1955

    steve1955 Registered Member

    Joined:
    Feb 7, 2004
    Posts:
    1,384
    Location:
    Sunny(in my dreams)Manchester,England
    Its one of the few "nasties" that every AV company seem to use the same name for, so I doubt eset would use a different name in their defs
     
    steve1955, Jul 8, 2004
    #5
  6. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    163,888
    Location:
    Texas

    I see two who use that name here.
     
    ronjor, Jul 8, 2004
    #6
  7. TAG97

    TAG97 Registered Member

    Joined:
    Feb 10, 2002
    Posts:
    616
    Location:
    Connecticut USA
    And this is from DrWeb signatures

    Win32.HLLM.Lovgate.14,
    Win32.HLLM.Lovgate.15, Win32.HLLM.Lovgate.16(2), Win32.HLLM.Lovgate.2(4),
    Win32.HLLM.Lovgate.7(2), Now I'll bet the ranch that it's there ;)
     
    TAG97, Jul 8, 2004
    #7
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...