Win32/Cutwail.AT (CA.com)

Date Published: 2 Oct 2007
Last Updated: 2 Oct 2007

Threat Assessment
Overall Risk: Low
Wild: Low
Destructiveness: Medium

Characteristics
Type:                 Trojan
Category:          Win32
Also known as: Cutwail AT (CA Anti-Spyware),
                          Trojan.Pandex (Symantec),
                          TSPY_PUSHDO.AY (Trend),
                          Trojan-Downloader.Win32.Banload.drs (Kaspersky)

Description
Win32/Cutwail.AT is a trojan with rootkit functionality that modifies the system´s ˝winlogon.exe˝ file. It may be used to download and execute arbitrary files, either by saving them to disk, or by injecting them into other processes. At the time of publication, these files were used to send bulk email, and to update Cutwail to the latest variant.
For more detailed information on the functionality of the Win32/Cutwail family, please see the Win32/Cutwail description elsewhere in our encyclopedia.

More information on CA Virus Information Center:
http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=66132

Computer Associates – the Trusted Source of Security Knowledge