Avast WEBforum

Other => Viruses and worms => Topic started by: TripleH on January 08, 2007, 09:56:45 AM

Title: -Trojaner Backdoor.Win32.agent.abf- in faked 1&1-Mails
Post by: TripleH on January 08, 2007, 09:56:45 AM
Hello fellow Avast-Community,

since saturday-evening ( 06.01.2007 ) through germany swaps a new trojan-attack. The way is almost the same: via a VERY (!!!) good copy of a 1&1-bill and a pdf.exe - file there is a trapped "Trojaner Backdoor.Win32.agent.abf".

The security-site "Heise security" reports that till this moment only a few antivirus-software provide protection.

My question: is there a protection via avast-scanner ?

Thanks in advance !
Title: Re: -Trojaner Backdoor.Win32.agent.abf- in faked 1&1-Mails
Post by: Lisandro on January 08, 2007, 01:34:11 PM
With the date you're posting, the only way will be having being infected (:'() and submit the file to avast or checking it into on-line scanners like Jotti or VirusTotal.
The vps history (avast updates) does not show (as far I could find) any info about this trojan.

This page will give you an overview of how often it is updated: http://www.avast.com/eng/vps_history.html
Title: Re: -Trojaner Backdoor.Win32.agent.abf- in faked 1&1-Mails
Post by: DavidR on January 08, 2007, 01:51:28 PM
There are always going to be these phishing style attacks and for the most part common sense plays a major part. Don't click links or open attachments in unsolicited emails, don't open attachments from within emails, always save it to a temporary location and scan it (that should effectively be done on saving the file). You could also use one of the milti-engine scanners to check it like virustotal, jotti, etc.

Don't run any .exe or multiple file type (.txt.exe, etc.) attachments.

Checking avasts VPS history or virus database might not reveal anything, that is not to say it wouldn't protect you as avast may call it something different, there is o standard naming convention for malware names, so it may have many aliases.