Virus alert as of late last week

Here are the slightly belated (on my behave) but still relevent virus threats out there.

W32/Forbot-AR – A backdoor Trojan that spreads through network
shares, dropping “securitychk.exe” on the infected machine. It
creates a service called “Microsoft Secure Messenger.NET
Service” and allows backdoor access through IRC. (Sophos)

W32/Bagz-D – A mass-mailing worm that can also allows an
attacker to send down additional components through a backdoor.
The attachment will be a .zip or .exe file and it will create a
service called “RPC32”. (Sophos)

W32/Anzae-A – A mass-mailing worm with a Spanish twist. The
message text is in Spanish and the infected attachment is a
.zip. It drops sw.exe, sx.exe, sz.exe and Inzax.exe on the
infected machine. (Sophos)

Troj/Banker-HC – Another password-stealing Trojan that targets
Brazilian banking sites. (Sophos)

W32/Agobot-SJ – This Agobot variant can be used for a number of
purposes, including using the infected machine as proxy,
stealing local information, and more. It spreads through network
shares by exploiting one of four Windows vulnerabilities and
drops “hmlsvc32.exe” on the infected machine. (Sophos)

Troj/Whistler-F – A worm that attempts to delete the contents of
the infected machine’s hard drive. It first drops “whismng.exe”
on the infected machine. (Sophos)

W32/Mytob-AZ – A mass-mailer worm that looks like a security or
account warning. The attached file will be ZIP, EXE, PIF, SCR or
CMD and the virus will install “LienVandeKelder.exe” on infected
machines. (Sophos)

W32/Mytob-CI – Very similar to Mytob-AZ with the added bonus of
being able to kill anti-virus software running on the infected
machine. (Sophos)

W32/Mytob-CJ – Another similar Mytob variant. This one uses
“sky.exe” as the infected file. (Sophos)

Troj/Haxdoor-Y – A Trojan that provides backdoor access to the
infected machine. It sets up the service “AVPX32”. (Sophos)

W32/Eyeveg-G – A backdoor Trojan that spreads through e-mail
with an infected ZIP file. The ZIP itself contains a number of
SCR files. It can be used for key logging, sending e-mail and
monitoring Web traffic. (Sophos)

W32/Oscabot-E – This Trojan tries to spread through AOL Instant
Messenger. It sends a link in a message. If followed, the file
“userint32.exe” will be installed on the target machine.
(Sophos)

Troj/Kelvir-P -A new Kelvir worm that spreads like Oscabot
above, except Kelvir uses MSN Messenger. (Sophos)

Troj/Vidlo-J – A downloading Trojan that attempts to grab
“prev.exe” from a predefined site. (Sophos)