[wbeCheck]
Company=
Product=wbeCheck aka Floid
Threat=Trojan horse
CompanyURL=
CompanyProductURL=
CompanyPrivacyURL=
Functionality=Monitors and alters HTTP headers
Privacy=
Description=F-Secure information: http://www.f-secure.com/v-descs/wbecheck.shtml %0D%0AMcAfee information: http://vil.nai.com/vil/content/v_99504.htm
EditDate=20021020
SalisburyID=20

[NetBUIE]
Company=
Product=NetBUIE, aka Trojan.NetBuie.A
Threat=Trojan horse
CompanyURL=
CompanyProductURL=
CompanyPrivacyURL=
Functionality=
Privacy=
Description=According to Symtantec: http://securityresponse.symantec.com/avcenter/venc/data/trojan.netbuie.a.html it is a trojan horse disguised as an XBox emulator.
EditDate=20021020
SalisburyID=19

[Benjamin]
Company=
Product=Benjamin aka W32.Benjamain
Threat=Worm
CompanyURL=
CompanyProductURL=
CompanyPrivacyURL=
Functionality=A worm working with the P2P network KaZaA. Cloaks itself with filenames of popular downloads. If downloaded, creates a new folder in your System directory, shares it, and makes multiple copies of itself in it.
Privacy=
Description=Symantec information: http://securityresponse.symantec.com/avcenter/venc/data/w32.benjamin.worm.html %0D%0AMcAfee information: http://vil.mcafee.com/dispVirus.asp?virus_k=99495
EditDate=20021020
SalisburyID=15

[DocTor]
Company=
Product=DocTor aka W32/Dotor-A
Threat=Worm
CompanyURL=
CompanyProductURL=
CompanyPrivacyURL=
Functionality=
Privacy=
Description=Sophos information: http://www.sophos.com/virusinfo/analyses/w32dotora.html %0D%0ASymantec information: http://securityresponse.symantec.com/avcenter/venc/data/w32.dotor.a@mm.html %0D%0AMcAfee information: http://vil.mcafee.com/dispVirus.asp?virus_k=99533
EditDate=20021020
SalisburyID=18

[Klez]
Company=
Product=Klez.E, Klez.H
Threat=Worm
CompanyURL=
CompanyProductURL=
CompanyPrivacyURL=
Functionality=Gets installed by opening an infected email. Once installed, it sends itself to all contacts it can gather from your address book, even email addresses found in the web site cache. Subject and contents of these mails change.
Privacy=
Description=Symantec information: http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.h@mm.html %0D%0ASophos information: http://www.sophos.com/virusinfo/analyses/w32klezh.html %0D%0AMcAfee Information: http://vil.mcafee.com/dispVirus.asp?virus_k=99455 %0D%0ADetection finds only main files. If you find one or both Klez entries, make sure you update your antivirus software and use it to remove the worm.%0D%0AAlso, if you've got We-Blocker installed, this may be a false positive, so check with your AV first before removing it!
XBlockID=376
EditDate=20021020
SalisburyID=17

[Godmessage]
Product=Godmessage
Threat=Worm
Description=http://www.dark-e.com/archive/trojans/god/worm01/
EditDate=20021020
SalisburyID=14

[Element]
Product=Element
Threat=Worm
Description=http://securityresponse.symantec.com/avcenter/venc/data/w32.elem.trojan.html
EditDate=20021020
SalisburyID=16

[OpaServ]
Threat=Worm
Functionality=Infects Win9x machines over open network shares of drive C.
Description=To make sure this is no false positive, see if 4 entries for the problem are detected. You should also use your AV to verify removal is complete.%0D%0Ahttp://www.f-secure.com/v-descs/opasoft.shtml
EditDate=20021020
SalisburyID=11