Webroot Software Development Team

Variants: This spyware is morphing at a rapid rate. Below, variants and their estimated appearance date are listed in reverse chronological order. DNSRelay.dll – August 7, 2003 Svchost32 – August 3, 2003 Oemsyspnp – July 29, 2003 Msspi.dll – July 28, 2003 Vrape – July 20, 2003 OSLogo.bmp – July 10, 2003 Bootconf – July […]

Aliases: rb32 (its executable name) Variants: RapidBlaster/v1 is the original version. RapidBlaster/lp is an update using a slightly different names. RapidBlaster/Ainst is an ActiveX installer used to load v1 or lp. The most recent variants of RapidBlaster have been observed “morphing” themselves to evade detection. RapidBlaster periodically downloads data from its controlling server that contains […]

Aliases: eGroup Variants: IEAccess/IEDial and IEAccess/HTMLAccess are similar but use different filenames and IDs. Description: IEAccess is an ActiveX control used to download and install premium-rate dialers*, primarily for porn sites. * Dialers are a type of software typically used by vendors serving pornography via the Internet. Once dialer software is downloaded, the user is […]

Intruder: KeenValue Description:KeenValue is advertising software that tracks: Web sites/pages viewed The amount of time spent at some Web sites Response to the Advertisements displayed Standard web log information including IP address and system settings What software is on your personal computer Your first and last name, country, and five digit ZIP code Your usage […]

Aliases: Xupiter Toolbar, browserwise.com Variants: Xupiter/Xupiter, Xupiter/Xjupiter, Xupiter/2003, Xupiter/Sqwire, Xupiter/OrbitExplorer, Xupiter/Browserwise, Xupiter/Browser Description: Xupiter is an Internet Explorer toolbar that tracks your web surfing activities and displays numerous targeted pop-up advertisements onto your computer. The adware program has the ability to hijack your homepage and address bar searches, add Xupiter links to your bookmarks, and […]