Infostealer.Rivarts

Infostealer.Rivarts is a Trojan horse that steals bank account and sensitive information and sends it to a remote server. It also gathers SSL web certificates and can hijack a browser connection.

The Trojan is usually downloaded from the following site:
[http://]www.enerbe.org/theta[REMOVED]



NOTE : Definitions prior to May 10, 2006 may detect this threat as PWSteal.Rivarts

Protection

• Initial Rapid Release version March 3, 2006
• Latest Rapid Release version August 20, 2008 revision 017
• Initial Daily Certified version March 3, 2006
• Latest Daily Certified version December 8, 2008 revision 050
• Initial Weekly Certified release date March 6, 2006

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Medium

Distribution

• Distribution Level: Low