Protectioon against Clampi Trojan (also known as Ligats, llomo, or Rscan)?

Discussion in 'NOD32 version 2 Forum' started by Duckboat, Aug 5, 2009.

Thread Status:
Not open for further replies.
  1. Duckboat

    Duckboat Registered Member

    Joined:
    Apr 2, 2009
    Posts:
    5
    I read an article on Clampi Trojan (also known as Ligats, llomo, or Rscan). I searched the virus base and do not see any of these mentioned.
    Are we protected against this trojan with just Nod32o_O
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,415
    It's hard if not impossible to tell without getting a sample as each company gives different names to threats. All I can say is that Ilomo is detected by ESET, but it's impossible to confirm that it's the Ilomo you mean.
     
  3. agoretsky

    agoretsky Eset Staff Account

    Joined:
    Apr 4, 2006
    Posts:
    4,033
    Location:
    California
    Hello,

    I believe this is detected as Win32/TrojanDropper.Agent.NXV. Detection for it was added in virus signature database 4200, released on June 30, 2009.

    Regards,

    Aryeh Goretsky
     
  4. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,415
    As I reckon, the above mentioned dropper drops malware that we call Win32/Ilomo.
     
  5. shill

    shill Registered Member

    Joined:
    Oct 7, 2009
    Posts:
    1
  6. agoretsky

    agoretsky Eset Staff Account

    Joined:
    Apr 4, 2006
    Posts:
    4,033
    Location:
    California
    Hello,

    It is likely, but without a sample to scan to confirm it is difficult to be 100% certain.

    Regards,

    Aryeh Goretsky
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.