Sophos about Troj/KeyHost-A

Discussion in 'malware problems & news' started by FanJ, Feb 19, 2004.

Thread Status:
Not open for further replies.
  1. FanJ

    FanJ Guest

  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Hi FanJ,

    Do you know if that is the Keyhost.exe that is spread by jraun?
    http://www.wilderssecurity.com/showthread.php?t=17152

    Regards,

    Pieter
     
  3. FanJ

    FanJ Guest

    Hi Pieter,

    I'm afraid not at the moment.

    That was all the Sophos site and email was saying.

    Maybe we can find more about it (what ever "it" maybe ;) ) at some of the virus-encyclopedia.
    Or maybe Gavin or Kevin or some of the other experts could jump in.
     
  4. FanJ

    FanJ Guest

    In the Primary list of TDS-3:

    Adware.keyhost

    In the list of BOClean:

    1249. JRAUN
    1250. JRAUN2

    I don't know whether these all are the same....
     
  5. FanJ

    FanJ Guest

    First of all:
    Apologies to Pieter: Of course you are definitely amongst those experts!!!


    For the record:
    We might probably never know what exactly Sophos was detecting originally; so no need to speculate on that (eh, FanJ speaking to himself... :rolleyes: ).

    [hr]

    Want some other links?

    PestPatrol Research:

    Keyhost:
    http://pestpatrol.com/PestInfo/k/keyhost.asp

    Jraun:
    http://pestpatrol.com/pestinfo/j/jraun.asp


    Symantec:

    Jraun and keyhost:
    http://securityresponse.symantec.com/avcenter/venc/data/adware.jraun.html
     
  6. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Sounds like the one to me :)
     
Loading...
Thread Status:
Not open for further replies.