Smitfraud-C.MailBot

[dougk]

Harvest.exe is installed on this PC as part of Computer Associates Harvest Change Manager.


Smitfraud-C.MailBot: User settings (Registry value, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MUICache\*\harvest.exe

Smitfraud-C.MailBot: User settings (Registry value, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\ShellNoRoam\MUICache\*\harvest.exe

--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2005-06-01 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2006-02-06 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2006-02-20 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2006-09-01 Includes\Beta.sbi (*)
2005-02-16 Includes\Beta.uti (*)
2006-09-01 Includes\Cookies.sbi (*)
2006-09-01 Includes\Dialer.sbi (*)
2006-09-01 Includes\Hijackers.sbi (*)
2006-09-01 Includes\Keyloggers.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2006-09-01 Includes\Malware.sbi (*)
2006-09-01 Includes\PUPS.sbi (*)
2006-09-01 Includes\Revision.sbi (*)
2006-09-01 Includes\Security.sbi (*)
2006-09-01 Includes\Spybots.sbi (*)
2005-02-17 Includes\Tracks.uti
2006-09-01 Includes\Trojans.sbi (*)

[Buster]

Hello Doug,

thanks for reporting. A fixed detection file will be released on next friday.:bigthumb: