March 2006 - Posts
MS Anti-Spyware Beta1 Defs. "5825" available
Not to be confused with Windows Defender.
For those of you continuing to use MS Anti-Spyware Beta1
definitions should be available until July.
Update via the app.
Ad-aware Definition File Update [SE1R101] 27.03.06
Please use the web update feature within the application to obtain the latest definition file.
New Definitions:
========================
Adware.Henbang
WareOut
Updated Definitions:
========================
180Solutions +1
404search
ABetterInternet.Aurora +3
Adintelligence.AproposToolbar +9
Adware.Look2Me +12
Adware.ZenoSearch
AlfaCleaner
Alset
Coulomb Dialer
DealHelper
Dialer
e2give
ErrorSafe +3
eUniverse
GetMiraR
Lop +14
Malware.SpywareStrike
Purityscan +3
SCBAR
SpyAxe +2
SpywareNo +2
Tracking cookie
WebHancer
Win32.Trojan.Downloader +11
Win32.Trojan.Mirc +3
Win32.TrojanDownloader.Qoologic +2
WinFixer +3
Virtumonde +2
Zango
The MD5 checksum for the defs.ref file is:
88ba24f7b36c3f3fb5ee88617db856dc

Advanced users *may* want to manually update using the below file.
http://download.lavasoft.de.edgesuite.net/public/defs.zip
Unzip - ensure that it is dated today!
MVPS HOSTS Update
[03-24-06]
Blocking Unwanted Parasites with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm
http://www.mvps.org/winhelp2002/hosts.zip (107 kb)
http://www.mvps.org/winhelp2002/hosts.txt (428 kb)
How To: Download and Extract the HOSTS file
http://www.mvps.org/winhelp2002/hosts2.htm
HOSTS File - Frequently Asked Questions
http://www.mvps.org/winhelp2002/hostsfaq.htm
The "text" version also make a good reference for determining possible
culprits.
Sign up for HOSTS file update notices
http://www.mvps.org/winhelp2002/hosts.htm#contribute
SpyBot Definition File Update 24.03.06
Updated Definitions: 1 MB. << Note to dial-up users.
Updated English Target Descriptions File: 59 KB.
Updated ~Beta Detections: 6 KB. ADVANCED USERS ONLY!
Highlights of the new/added detections:
Hijacker
+ MaxSearch + CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL
Malware
+ SpyFalcon + Vcodec.eMedia + Winsoftware.WinAntiVirusPro2006 + MyNetProtector + SpywareStrike + AzeSearch + Smitfraud-C.Toolbar888 + Look2Me.Topconverting + Web-Nexus + Smitfraud-C. + Command Service + Vcodec
Security
+ Windows.RedirectedHosts
Spyware
+ KillSec + UCmore + Torpig
Trojan
+ Jupilites + Win32.VB.un + Win32.VB.vg + Win32.Winspg.a + Zlob.Downloader + Spyware Disinfector + BPS Spyware Remover
+ BraveSentry + Nous-Tech.UDefender
Total: 312126[b] fingerprints in 38463 rules for 1892 products.
NOTE: Choose the download mirror site closest to you!
If you receive error messages such as "bad checksum" it is due to heavy server traffic. Wait until later or tomorrow to avoid disappointment.
Don't forget to re-immunize SpyBot once the new definitions are applied!
A brief explanation of the diffences in Immunzation between Windows XP and Windows 9x.
http://forums.spybot.info/showthread.php?t=1988
SpyBot Updates History -
http://www.spybotupdates.com/index.php?page=updatehistory
Ad-aware Definition Update [SE1R100] 23.03.06
Please use the web update feature within the application to obtain the latest update.
New Definitions:
========================
Accoona +3
Updated Definitions:
========================
Adgoblin
Adintelligence.AproposToolbar +2
AdShooter
Adware.Look2Me +14
Adware.WebSearch
BargainBuddy
ClickSpring
CommonName
CoolWebSearch
Dialer
DyFuCA +2
Elitum.ElitebarBHO +3
eUniverse
GAIN
IELoader
ImIServer IEPlugin
Lop
MediaMotor
Perflogger
PromulGate
Rads01.Quadrogram
Win32.Adverts.TrojanDownloader
Win32.PWSteal.Tarno
Win32.Spybot.Worm
Win32.Trojan.Downloader +5
Win32.Trojan.Startpage
Win32.TrojanClicker +2
WinFavorites
Virtumonde +5
The MD5 checksum for the defs.ref file is:
1dcad199c8358141cc3cebac7fb6c53a

Advanced users may want to manually update using the below file:
http://download.lavasoft.de.edgesuite.net/public/defs.zip
Unzip - ensure that it is dated today!

Ad-aware Definition File Update [SE1R99] 20.03.06
Please use the web update feature within the application to obtain the new definition file.
New Definitions:
========================
Adware.SearchingAll +2
Win32.Trojan.Hexdoor
Updated Definitions:
========================
Adintelligence.AproposToolbar
Adroar
Adware.DollarRevenue +3
Adware.Look2Me +2
Adware.ZenoSearch +5
AlfaCleaner
CometSystems
iSearch Toolbar
Malware.SpywareStrike
PurityScan +4
Rads01.Quadrogram
Starware Toolbar
Targetsaver
WebHancer
Win32.PWSteal.Tarno +2
Win32.Trojan.Delf
Win32.Trojan.Downloader +8
Win32.TrojanClicker
Win32.TrojanDownloader.Delf
Win32.TrojanSpy.Goldun
Winfixer +2
The MD5 checksum for the defs.ref file is:
63b7d662f2262e6bdbc81e5b024d7395
Advanced users *may* manually update using the below zip file.
http://download.lavasoft.de.edgesuite.net/public/defs.zip
Once unzipped ensure that is is time-stamped todays date.

SpyBot Definition File Update 19.03.06
Updated Definitions: 1 MB. << Note large file for dial-up users.
Updated ~Beta Definitions: 10 KB. FOR ADVANCED USERS ONLY.
Highlights of the new/added detections:
Dialer
+ Baciami
Hijacker
+ C2.lop + CoolWWWSearch.Feat2Installer + CoolWWWSearch.Feat2Installer.ADS + CoolWWWSearch.Service
+ CoolWWWSearch.Feat2DLL
Malware
+ Vcodec.eMedia + ConHook-N ++ MS Guard + SpyFalcon + Vcodec
+ WinFixer2005
Spyware
+ GAIN.Gator
Trojan
+ Win32.Small.cgc + Win32.Small.dsf + Win32.Banker.anv + Win32.Small.dsg ++ SpyShield + Zlob.Downloader + LdPinch-DH
Total: 309631 fingerprints in 37698 rules for 1869 products.
NOTE: Choose the download mirror site closest to you!
If you receive error messages such as "bad checksum" it is due to heavy server traffic. Wait until later or tomorrow to avoid disappointment.
Don't forget to re-immunize SpyBot once the new definitions are applied!
A brief explanation of the diffences in Immunzation between Windows XP and Windows 9x. http://forums.spybot.info/showthread.php?t=1988
SpyBot Updates History -
http://www.spybotupdates.com/index.php?page=updatehistory
Microsoft Anti-Spyware Beta1 Definitions "5817"
*Not* to be confused with Windows Defender.
For those of you continuing to run MSAS Beta1.
Defs "5817" are available on the update servers.
Menu > Help > About >
"Spyware Definition Version"
Update via the application.
Ad-aware Definition File Update [SE1R98] 16.03.06
Please use the webupdate feature within the application to obtain these latest updates.
New Definitions:
========================
Adware.FreeAccessBar
Adware.Look2Me +2
Adware.PLook
Adware.Sidesearch
Win32.Trojan.Spambot
Updated Definitions:
========================
Adintelligence.AproposToolbar
AdwareSheriff +2
Alexa
AlfaCleaner
Dialer +3
Elitum.ElitebarBHO
Lop +4
Rads01.Quadrogram
SpyFalcon
Spyware.AdvancedKeylogger
Win32.Trojan.Agent
Win32.Trojan.Downloader +3
Win32.TrojanDropper
Virtumonde +3
The MD5 checksum for the defs.ref file is:
608b52d79f9e1b285d498ac9ec570d86

Advanced users *may* manually update using the below file;
http://download.lavasoft.de.edgesuite.net/public/defs.zip
Note: Once unzipped - ensure the file is time-stamped todays date.
Spyware Blaster Update 16.03.06
5619 Total Items in the database - 15 new.
Please use the Web Update feature within the application to obtain these latest updates.
Ensure that the new items are fully enabled once downloaded and applied.
Ad-aware Definition File Update [SE1R97] 13.03.06
Please use the web update feature with the application to obtain the latest update.
New Definitions:
========================
OurXin +2
Win32.Backdoor.Bifrose
Updated Definitions:
========================
Adware.NaviPromo
Coolwebsearch
Malware.SpyGuard
Spyaxe
SpyFalcon
Win32.Trojan.Puper.d
Win32.TrojanSpy.Goldun +4
WinAntiSpyware
WinFixer +5
The MD5 checksum for the defs.ref file is:
a8eb8b5e6608e84b160b567461f71567
Advanced Users *may* manually update using the below file:
http://download.lavasoft.de.edgesuite.net/public/defs.zip
Once unzipped, ensure that it is time-stamped todays date before use!
SpyBot Definition File Update 10.03.06
Updated detections: 1.3 MB!
Updated ~Beta detections: 5 KB.
~Beta Advanced detection library.
(Advanced detection routines update: 87 KB.)
There appears to be two of the above available, the second consisting of another file: 238 KB.
Highlights of the new/added detections:
Dialer
+ VacPro
Hijacker
+ CoolWWWSearch.XPlugin + MetaStop + InterDefaultTool + CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL
Malware
+ WinFixer2005 + Mailbot + Smitfraud-C. + CashDeluxe + Smitfraud-C. Toolbar888 + Adware.Webtext + MS Guard
Spyware
+ Torpig + GAIN.Gator
Trojan
+ Win32.QQHelper.j + Win32.Delf.afv + Win32.Small.cfo + SpyShield + SpywareStop
Total: 308427 fingerprints in 37457 rules for 1862 products.
NOTE: Choose the download mirror site closest to you!
If you receive error messages such as "bad checksum" it is due to heavy server traffic. Wait until later or tomorrow to avoid disappointment.
Don't forget to re-immunize SpyBot once the new definitions are applied!
A brief explanation of the diffences in Immunzation between Windows XP and Windows 9x.
http://forums.spybot.info/showthread.php?t=1988
SpyBot Updates History -
http://www.spybotupdates.com/index.php?page=updatehistory
MVPS HOSTS Update
[03-09-06]
Blocking Unwanted Parasites with a Hosts File
http://www.mvps.org/winhelp2002/hosts.htm
http://www.mvps.org/winhelp2002/hosts.zip (105 kb)
http://www.mvps.org/winhelp2002/hosts.txt (420 kb)
How To: Download and Extract the HOSTS file
http://www.mvps.org/winhelp2002/hosts2.htm
HOSTS File - Frequently Asked Questions
http://www.mvps.org/winhelp2002/hostsfaq.htm
Note: the "text" version also make a good reference for determining culprit URLs.
Sign up for HOSTS file update notices
http://www.mvps.org/winhelp2002/hosts.htm#contribute
Ad-aware Definition File Update [SE1R96] 09.03.06
Please obtain these new definitions using the internal web updating engine with the application.
New Definitions:
========================
Spyagent
Updated Definitions:
========================
AdwareSheriff +2
Ezula
GoGoTools
SpyAxe
SpywareNo
WinFixer
Virtumonde
VX2 +2
The MD5 checksum for the defs.ref file is:
95f3031c892d60647aea2d09bd3d03cd
Advanced Users *may* manually update using the below file;
http://download.lavasoft.de.edgesuite.net/public/defs.zip
Note: Before use of the above file, unzip and ensure the date is time-stamped today!
Spyware Blaster Update 07.03.06
5604 Total Items in the database = 92 New.
Please use the Webupdate Feature withing Spyware Blaster to obtain the latest updates.
Ensure that the new items are fully enabled once downloaded and applied.

Ad-aware Definition File Update [SE1R95] 06.03.06
Use the webupdate feature with Ad-aware to obtain this latest update.
New Definitions:
========================
Adware.EnergyPlugin
Spyware.WeatherStudio +3
Win32.Trojan.Dnschanger
Win32.Trojan.Mirc +3
Updated Definitions:
========================
AdBlaster
Adware.Dropper
AdwareSheriff
AlfaCleaner
ErrorSafe
IBIS Toolbar
SpyFalcon
SpywareNo +4
TopMoxie
Trojan +5
UCmore +2
UnSpyPC
Win32.Trojan.Downloader +26
Win32.Trojan.Spy
Win32.Trojan.Startpage
Win32.TrojanClicker +3
Win32.TrojanDownloader.Qoologic
Win32.TrojanDropper
WinFixer +2
Virtumonde +4
VX2 +2
Zango +2
The MD5 checksum for the defs.ref file is:
b5ea602defba6d49b40cf15a93b808fd
Advanced Users *may* manually update using the below file.
http://download.lavasoft.de.edgesuite.net/public/defs.zip
If used, unzip ensure that is dated correctly before use.
Microsoft Anti-Spyware Beta1 Definitions "5813" are available.
Update via the application.
I am unsure as this time how long definitions for MSAS Beta1 will continue.
SpyBot Definition File Update 03.03.06
Updated Definitions: 1 MB.
Updated English Target Descriptions file: 54 KB.
Updated ~ Beta Definitions: 4 KB. ADVANCED USERS ONLY.
Highlights of the new/added detections:
Dialer
+ Carima Enterprises
Hijacker
+ CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL + MaxSearch
Malware
- MaxSearch + SpywareNo + SpyContra
Trojan
+ Goldun + Win32.Agent.AEW + Win32.Agent.acy + Win32.Banload.sr + Win32.Dadobra.kd + Win32.Dadobra.ke
Total: 307088 fingerprints in 37135 rules for 1844 products.
NOTE: Choose the download mirror site closest to you!
If you receive error messages such as "bad checksum" it is due to heavy server traffic. Wait until later or tomorrow to avoid disappointment.
Don't forget to re-immunize SpyBot once the new definitions are applied!
A brief explanation of the diffences in Immunzation between Windows XP and Windows 9x.
http://forums.spybot.info/showthread.php?t=1988
SpyBot Updates History -
http://www.spybotupdates.com/index.php?page=updatehistory
Installation of the IE-Spyad list may disable some protections in SpyBot
and SpywareBlaster. Please check them and re-enable protections!