full-disclosure - Download.trojan appdl[1].exe

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <2DC4BD6CB857734FA44DBCE87FC6D8922EC012@lr-mail.littlerock>
From: akloster at spp.org (Alan Kloster)
Subject: Download.trojan appdl[1].exe

We have seen several infections caught by Symantec this morning as
download.trojan which appears to be a generic catch-all Symantec is
using for a wide variety of trojans that attempt to download files.  The
virus alert triggered the first time they opened IE this morning.  The
files that it identified as trojans were appdl.exe, appdl[1].exe and
sleep.exe.  The sleep.exe could have been a legit windows file, but it
shouldn't have been on the one of three PC's were a full scan was run.
I have searched Google and other sites for appdl.exe and appdl[1].exe
but the searches return nothing.  Does anyone have any info on this?
Thanks.

Alan Kloster