Search

website and run when a user accesses the said website. Download Routine This Trojan downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the

address/domain}:{port} . The malware is encoded to Base64 for encryption then concatenated to URL and finally sent to the following URL: http://{BLOCKED}-uro.ru/get/index.php?record={encoded base64 stolen

that connects to a malicious URL. NOTES: This malware checks if browser has the following details: name is Microsoft Internet Explorer version is MSIE 8 user agent is Windows NT 5.1 The URL it redirects

downloads using the following names: %TEMP%\{random value} It downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the parameter passed on to

URL. The URL where this malware downloads the said file depends on the parameter passed on to it by its components. Other Details This Trojan requires its main component to successfully perform its

URL. The URL where this malware downloads the said file depends on the parameter passed on to it by its components. Other Details This Trojan requires its main component to successfully perform its

hosted on a website and run when a user accesses the said website. Download Routine This Trojan downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file

name}\AppData\Local\Temp on Windows Vista and 7.) NOTES: This hacktool is used to perform the following attacks to a selected target URL or IP address: TCP Flood UDP Flood HTTP Flood

the created dllhost.exe It connects to the following URL to download file: http://{BLOCKED}.{BLOCKED}.72.223:8080/git/wiki.asp?id=519358d46ad51d9628cbe9059a502b67 http://{BLOCKED}.{BLOCKED

the following data: OS Version and Architecture Other Details This Trojan does the following: Connects to the following URL to download and load the payload on memory: sltp://setup.{BLOCKED

Upon execution, this Trojan downloads and executes a shellcode from the following URL and executes it: http://www.{BLOCKED}ler.co.kr/admincenter/files/boad/4/manager.php However, as of this writing, the

Upon execution, this Trojan downloads and executes a shellcode from the following URL and executes it: http://www.{BLOCKED}m.com/new/admin/data/product/manager.php However, as of this writing, the said

CVE-2005-4360,ms07-041 The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to

names: %TEMP%/{Random Numbers}.dll %TEMP%/{Random Numbers}.exe It downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the parameter passed

vulnerabilities. Arrival Details This Trojan may be hosted on a website and run when a user accesses the said website. Download Routine This Trojan downloads a possibly malicious file from a certain URL. The URL

possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the parameter it passed to its components. Exploit:JS/ShellCode.BG(Microsoft)

malware/grayware packages. Download Routine This malware saves the files it downloads using the following names: {malware path}\{random value} It downloads a possibly malicious file from a certain URL. The URL where

website and run when a user accesses the said website. Download Routine This Trojan downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the

%Application Data%\DigitalSites\UpdateProc . It reads the file %Application Data%\nvm.log . It requires parameters for execution. It deletes itself if the parameter is invalid. It may accesses the URL checkver.

Description Name: Possible FAKEAV - URL request . This is Trend Micro detection for packets passing through HTTP network protocols that manifests Callback activities which can be a potential intrusion. Below are some indicators of unusual behavior:Su...