[wbeCheck]
Company=
Product=wbeCheck aka Floid
Threat=Trojan horse
CompanyURL=
CompanyProductURL=
CompanyPrivacyURL=
Functionality=Monitors and alters HTTP headers
Privacy=
Description=F-Secure information: http://www.f-secure.com/v-descs/wbecheck.shtml %0D%0AMcAfee information: http://vil.nai.com/vil/content/v_99504.htm
EditDate=20021020

[NetBUIE]
Company=
Product=NetBUIE, aka Trojan.NetBuie.A
Threat=Trojan horse
CompanyURL=
CompanyProductURL=
CompanyPrivacyURL=
Functionality=
Privacy=
Description=According to Symtantec: http://securityresponse.symantec.com/avcenter/venc/data/trojan.netbuie.a.html it is a trojan horse disguised as an XBox emulator.
EditDate=20021020

[Benjamin]
Company=
Product=Benjamin aka W32.Benjamain
Threat=Worm
CompanyURL=
CompanyProductURL=
CompanyPrivacyURL=
Functionality=A worm working with the P2P network KaZaA. Cloaks itself with filenames of popular downloads. If downloaded, creates a new folder in your System directory, shares it, and makes multiple copies of itself in it.
Privacy=
Description=Symantec information: http://securityresponse.symantec.com/avcenter/venc/data/w32.benjamin.worm.html %0D%0AMcAfee information: http://vil.mcafee.com/dispVirus.asp?virus_k=99495
EditDate=20021020

[DocTor]
Company=
Product=DocTor aka W32/Dotor-A
Threat=Worm
CompanyURL=
CompanyProductURL=
CompanyPrivacyURL=
Functionality=
Privacy=
Description=Sophos information: http://www.sophos.com/virusinfo/analyses/w32dotora.html %0D%0ASymantec information: http://securityresponse.symantec.com/avcenter/venc/data/w32.dotor.a@mm.html %0D%0AMcAfee information: http://vil.mcafee.com/dispVirus.asp?virus_k=99533
EditDate=20021020

[Klez]
Company=
Product=Klez.E, Klez.H
Threat=Worm
CompanyURL=
CompanyProductURL=
CompanyPrivacyURL=
Functionality=Sends itself by mail.
Privacy=
Description=Symantec information: http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.h@mm.html %0D%0ASophos information: http://www.sophos.com/virusinfo/analyses/w32klezh.html %0D%0AMcAfee Information: http://vil.mcafee.com/dispVirus.asp?virus_k=99455 %0D%0ADetection finds only main files. If you find one or both Klez entries, make sure you update your antivirus software and use it to remove the worm.%0D%0AAlso, if you've got We-Blocker installed, this may be a false positive, so check with your AV first before removing it!
XBlockID=376
EditDate=20021020

[Godmessage]
Product=Godmessage
Threat=Worm
Description=http://www.dark-e.com/archive/trojans/god/worm01/
EditDate=20021020

[Element]
Product=Element
Threat=Worm
Description=http://securityresponse.symantec.com/avcenter/venc/data/w32.elem.trojan.html
EditDate=20021020

[OpaServ]
Threat=Worm
Functionality=Infects Win9x machines over open network shares of drive C.
Description=To make sure this is no false positive, see if 4 entries for the problem are detected. You should also use your AV to verify removal is complete.%0D%0Ahttp://www.f-secure.com/v-descs/opasoft.shtml
EditDate=20021020

