Protectioon against Clampi Trojan (also known as Ligats, llomo, or Rscan)?

Discussion in 'NOD32 version 2 Forum' started by Duckboat, Aug 5, 2009.

Thread Status:
Not open for further replies.
  1. Duckboat

    Duckboat Registered Member

    Joined:
    Apr 2, 2009
    Posts:
    5
    I read an article on Clampi Trojan (also known as Ligats, llomo, or Rscan). I searched the virus base and do not see any of these mentioned.
    Are we protected against this trojan with just Nod32o_O
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    It's hard if not impossible to tell without getting a sample as each company gives different names to threats. All I can say is that Ilomo is detected by ESET, but it's impossible to confirm that it's the Ilomo you mean.
     
  3. agoretsky

    agoretsky Eset Staff Account

    Joined:
    Apr 4, 2006
    Posts:
    4,032
    Location:
    California
    Hello,

    I believe this is detected as Win32/TrojanDropper.Agent.NXV. Detection for it was added in virus signature database 4200, released on June 30, 2009.

    Regards,

    Aryeh Goretsky
     
  4. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    As I reckon, the above mentioned dropper drops malware that we call Win32/Ilomo.
     
  5. shill

    shill Registered Member

    Joined:
    Oct 7, 2009
    Posts:
    1
  6. agoretsky

    agoretsky Eset Staff Account

    Joined:
    Apr 4, 2006
    Posts:
    4,032
    Location:
    California
    Hello,

    It is likely, but without a sample to scan to confirm it is difficult to be 100% certain.

    Regards,

    Aryeh Goretsky
     
Thread Status:
Not open for further replies.