Search

TrojanSpy.Win32.FAREIT.TICOBBO

LocalServiceAndNoImpersonation %Windows%\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe %System%\sppsvc.exe "%System Root%\Program Files\Windows Media Player\wmpnetwk.exe" (Note: %System Root% is the Windows root folder, where

Backdoor.MSIL.NETWIRED.FAE

%System Root%\Program Files\Windows Media Player\wmpnetwk.exe" (Note: %System% is the Windows system folder, where it usually is C:\Windows\System32 on all Windows operating system versions.. %Windows% is

TrojanSpy.MSIL.NEGASTEAL.VLG

\Framework64\v4.0.30319\mscorsvw.exe %System%\sppsvc.exe "%System Root%\Program Files\Windows Media Player\wmpnetwk.exe" (Note: %System% is the Windows system folder, where it usually is C:\Windows\System32 on

Trojan.Win32.TASKER.O

\Windows Media Player\wmpnetwk.exe" (Note: %System% is the Windows system folder, where it usually is C:\Windows\System32 on all Windows operating system versions.. %Windows% is the Windows folder, where it

TrojanSpy.Win32.QUASAR.H

\Windows Media Player\wmpnetwk.exe" %System%\svchost.exe -k WerSvcGroup (Note: %System% is the Windows system folder, where it usually is C:\Windows\System32 on all Windows operating system versions..

Trojan.Win32.WATAC.THJAEAI

Media Player\wmpnetwk.exe" %System%\svchost.exe -k WerSvcGroup (Note: %System% is the Windows system folder, where it usually is C:\Windows\System32 on all Windows operating system versions.. %Windows% is

PE_DETNAT.D

Media Player\migrate.exe %Program Files%\Windows Media Player\setup_wm.exe %Program Files%\Windows Media Player\wmplayer.exe %Program Files%\Windows NT\Accessories\wordpad.exe %Program Files%\Windows NT

Ransom_Maoloa.R002C0DK419

\Documents and Settings\{username}\usb_drive.img %System Root%\Program Files\Common Files\SpeechEngines\{username} %Program Files%\Windows Media Player\Icons\{username} %All Users Profile%\McAfee\WinCore\

Ransom_Maoloa.R002C0DK519

\Documents and Settings\{username}\usb_drive.img %System Root%\Program Files\Common Files\SpeechEngines\{username} %Program Files%\Windows Media Player\Icons\{username} %All Users Profile%\McAfee\WinCore\

TrojanSpy.MSIL.URSNIF.AE

\Framework64\v4.0.30319\mscorsvw.exe %System%\sppsvc.exe "%System Root%\Program Files\Windows Media Player\wmpnetwk.exe" %System%\sc.exe start w32time task_started %System%\sdclt.exe /CONFIGNOTIFICATION

PE_SALITY.L

MEDIA PLAYER\MIGRATE.SDQ %Program Files%\WINDOWS MEDIA PLAYER\SETUP_WM.HLM %Program Files%\WINDOWS MEDIA PLAYER\WMPLAYER.RTH %Program Files%\WINDOWS NT\ACCESSORIES\WORDPAD.PCO %Program Files%\WINDOWS NT

Trojan.Win32.TRICKBOT.TIGOCBAINS

\Microsoft\ Security Center cval = "0" Dropping Routine This Trojan drops the following files: %All Users Profile%\Microsoft\Windows\DRM\drmstore.hds %AppDataLocal%\Microsoft\Media Player

PE_LOOKED.DJ