OT: Thanks for sharing that Domer...
I have heard very few other people saying they'd ever experienced or seen the RB viruses/spyware. You are actually the third.
The only way they were detectable was if you turned your firewall up to its highest setting. Most peeps don't do that, because it makes for slow going on the internet.
The three viruses I caught coming out of the RB servers were:
-Downloader.Trojan
-Trojan.ByteVerify
-Hacktool.CyberSpy
How could they view our account positions? Easy.
Check out what Hacktool.CyberSpy does:
Behavior
Hacktool.CyberSpy is a hacktool that monitors email and Web site activity, keystrokes, takes snapshots of the desktop, and logs instant messaging conversations.
Symptoms
One or more files are detected as Hacktool.CyberSpy.
Performs the following activity on the infected computer:
• Records all email messages viewed in Outlook, Outlook Express, and AOL 6.0/7.0/8.0 email clients.
• Records Web site title, addresses, and time spent viewing sites in Opera, Internet Explorer, and Netscape browsers.
• Records all the keystrokes (including hidden system keys), including when they were pressed, and categorizes these by date and application.
• Creates desktop screenshots at specified intervals.
• Records both sides of all instant message conversations in the following programs: AOL, AIM, MSN, ICQ
• Can be configured to run at startup for all user accounts.
• Can be run in stealth mode, so that it is not visible in the taskbar or the Applications tab of the Windows Task Manager. (The program still shows in the Processes View of the Windows Task Manager as cs.exe.)
Here's what Downloader.Trojan can do:
Downloader.Trojan is a program that downloads another malicious program from a remote Internet site and executes it on the local system.
