Another Massive ID theft ring

It looks like Sunbelt has found ANOTHER massive Identity theft ring. They suspect it's a trojan from the Dumaru family that is contentedly logging the infromation and promise more details. They did get a hold of the trojan and passed it through virustotal to see what it was. Very FEW antivirus vendors have definitions for it at this point. The file in question is winldra.exe Here's the summary they got.

This is a report processed by VirusTotal on 08/19/2005 at 23:45:42 (CET) after scanning the file "winldra.exe" file. Antivirus Version Update Result AntiVir 6.31.1.0 08.19.2005 no virus found Avast 4.6.695.0 08.19.2005 no virus found AVG 718 08.19.2005 no virus found Avira 6.31.1.0 08.19.2005 no virus found BitDefender 7.0 08.19.2005 no virus found CAT-QuickHeal 7.03 08.19.2005 no virus found ClamAV devel-20050725 08.18.2005 no virus found DrWeb 4.32b 08.19.2005 no virus found eTrust-Iris 7.1.194.0 08.18.2005 no virus found eTrust-Vet 11.9.1.0 08.19.2005 Win32.Bambo Fortinet 2.41.0.0 08.18.2005 suspicious F-Prot 3.16c 08.19.2005 no virus found Ikarus 0.2.59.0 08.19.2005 no virus found Kaspersky 4.0.2.24 08.19.2005 no virus found McAfee 4563 08.19.2005 BackDoor-CCT NOD32v2 1.1198 08.19.2005 no virus found Norman 5.70.10 08.18.2005 no virus found Panda 8.02.00 08.19.2005 no virus found Sophos 3.96.0 08.19.2005 no virus found Sybari 7.5.1314 08.19.2005 no virus found Symantec 8.0 08.19.2005 no virus found TheHacker 5.8.2.091 08.18.2005 no virus found VBA32 3.10.4 08.19.2005 suspected of Embedded.Backdoor.Win32.Dumador.dd

(It looks as though 3 of the antivirus vendors recognize this so far.) They're working with the vendors to get signature updates.