Search
Keyword: troj_crypctb
This specially crafted .DOC file takes advantage of a vulnerability in certain versions of Adobe Flash Player to drop an embedded .SWF file detected by Trend Micro as SWF_DROPPER.A. This Trojan
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. It adds registry
This Trojan may be dropped by other malware. It is injected into all running processes to remain memory resident. It requires its main component to successfully perform its intended routine. Arrival
This Trojan takes advantage of the following software vulnerabilities to drop malicious files: Certain versions of Adobe Acrobat and Reader util.printd and Collab.CollectEmailInfo functions This
This Trojan may be dropped by other malware. It may be unknowingly downloaded by a user while visiting malicious websites. Arrival Details This Trojan may be dropped by other malware. It may be
It may be downloaded from remote sites by other malware. It adds registry entries to enable its automatic execution at every system startup. Arrival Details It may be downloaded from remote site(s)
It arrives as a file that exports the functions of other malware/grayware/spyware. It may be unknowingly downloaded by a user while visiting malicious websites. It may be dropped by other malware. It
Infection Points It may be downloaded from the following remote sites: {BLOCKED}eakme.com Other Details Based on analysis of the codes, it has the following capabilities: Exploits a vulnerability in
It may be dropped by other malware. It may arrive bundled with malware packages as a malware component. It may arrive as a file that exports functions used by other malware. It requires its main
It may be downloaded by other malware/grayware/spyware from remote sites. It arrives as an attachment to email messages spammed by other malware/grayware/spyware or malicious users. Arrival Details
It may be unknowingly downloaded by a user while visiting malicious websites. It may be dropped by other malware. It executes the files it drops, prompting the affected system to exhibit the
Download Routine It takes advantage of the following software vulnerabilities to allow a remote user or malware/grayware/spyware to download files: Vulnerability in the Adobe Acrobat and Reader
This Trojan may be dropped by other malware. It may arrive bundled with malware packages as a malware component. It executes the dropped file(s). As a result, malicious routines of the dropped files
To get a one-glance comprehensive view of the behavior of this Trojan, refer to the Threat Diagram shown below. This Trojan may be downloaded from remote sites by other malware. It adds registry
This Trojan executes the files it drops, prompting the affected system to exhibit the malicious routines they contain. Dropping Routine This Trojan drops the following files: %System%\esentprf32.dll
This Trojan may be downloaded by other malware/grayware/spyware from remote sites. It may be dropped by other malware. It may be unknowingly downloaded by a user while visiting malicious websites.
Trend Micro has flagged this Trojan as noteworthy due to the increased potential for damage, propagation, or both, that it possesses. This Trojan is related to another noteworthy entry BKDR_VBOT.A To
It may be downloaded by other malware/grayware/spyware from remote sites. It may be unknowingly downloaded by a user while visiting malicious websites. It modifies registry entries to enable its
It adds registry entries to enable its automatic execution at every system startup. Autostart Technique It adds the following registry entries to enable its automatic execution at every system
This Trojan may be dropped by other malware. It may be unknowingly downloaded by a user while visiting malicious websites. However, as of this writing, the said sites are inaccessible. Arrival