Search
Keyword: ms
Starfighter Patch.exe %System Root%\My Downloads\Internet and Computer Speed Booster Full Downloader.exe %System Root%\My Downloads\Hitman 2 Silent Assassin Crack.exe %System Root%\My Downloads\MS Train
Windows NT, and C:\Documents and Settings\{User name}\Start Menu\Programs\Startup.) Other System Modifications This Trojan modifies the following file(s): database files web files MS Office files video
infector infects the following file types: MS Office Files (.doc, .xls, .ppt, .mdb) Adobe PDF Files (.pdf) Archive Files(.zip, .rar) Program Application Files (.exe) Image Files (.gif, .png, .bmp, .jpg )
files: The file DECRYPT_INSTRUCTION.HTML also provides the instructions on how to decrypt files: It encrypts database, web, MS Office, video, images, script, text, and other non-binary files. Spammed via
infector infects the following file types: MS Office Files (.doc, .xls, .ppt, .mdb) Adobe PDF Files (.pdf) Archive Files(.zip, .rar) Program Application Files (.exe) Image Files (.gif, .png, .bmp, .jpg )
GlobalSCAPE CuteFTP Pro GoFTP INSoftware NovaFTP Ipswitch WS_FTP LeapWare LeapFTP LeechFTP LinasFTP MAS-Soft FTPInfo MS IE FTP Martin Prikryl My FTP NCH Software ClassicFTP NCH Software Fling NetDrive NetSarang
\CurrentVersion\Run avserve.exe = HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Run avserve2.exeUpdate Service = HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Run MS Config v13 =
following Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. MS Bulletin ID
{string 1} may be any of the following: amd cmd disk dll dsk hp intel ms tcp udp win The variable {string 2} may be any of the following: host mgr mon monitor proc process sys update updater This
GlobalSCAPE CuteFTP Lite GlobalSCAPE CuteFTP Pro GoFTP INSoftware NovaFTP Ipswitch WS_FTP LeapWare LeapFTP LeechFTP LinasFTP MAS-Soft FTPInfo MS IE FTP Martin Prikryl My FTP NCH Software ClassicFTP NCH Software
MAS-Soft FTPInfo MS IE FTP Martin Prikryl My FTP NCH Software ClassicFTP NCH Software Fling NetDrive NetSarang NexusFile Nico Mak Computing WinZip Notepad++ NppFTP Opera RhinoSoft FTPVoyager Robo-FTP 3.7
from the following: Thunderbird Eudora Internet Account Manager MS Outlook Outlook Express Group Mail Free IncrediMail Windows Mail Windows Live Mail Yahoo! Mail Gmail It attempts to get stored
FTPRush FTPVoyager Global Downloader GoFTP LeapFTP LeechFTP Linas FTP MS IE FTP My FTP NexusFile NovaFTP NppFTP Opera Software PuTTy Robo-FTP SecureFX SFTP SmartFTP SoftX FTPClient Staff-FTP Total Commander
{current or malware path}\SystemInfoConfig\node_modules\socket.io-client\node_modules\ms {current or malware path}\SystemInfoConfig\node_modules\socket.io-client\node_modules\object-component {current or
\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "%All Users Profile%\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "
Files%\PDFCreator\COM\MS Office %Program Files%\PDFCreator\COM\Perl %Program Files%\PDFCreator\COM\Python %Program Files%\PDFCreator\COM\Ruby %Program Files%\PDFCreator\COM\VB6 %Program Files%\PDFCreator
7 Home GlobalSCAPE CuteFTP 7 Professional GlobalSCAPE CuteFTP 8 Home GlobalSCAPE CuteFTP 8 Professional GoFTP Ipswitch WS_FTP LeapWare LeapFTP LeechFTP LinasFTP MAS-Soft FTPInfo MS IE FTP Passwords
7 Home GlobalSCAPE CuteFTP 7 Professional GlobalSCAPE CuteFTP 8 Home GlobalSCAPE CuteFTP 8 Professional GoFTP Ipswitch WS_FTP LeapWare LeapFTP LeechFTP LinasFTP MAS-Soft FTPInfo MS IE FTP Passwords
CuteFTP 8 Professional GoFTP Ipswitch WS_FTP LeapWare LeapFTP LeechFTP LinasFTP MAS-Soft FTPInfo MS IE FTP Passwords NCH Software ClassicFTP NovaFTP PuTTY Robo-FTP 3.7 SmartFTP SoftX.org FTPClient Staff-FTP
GlobalSCAPE CuteFTP 7 Home GlobalSCAPE CuteFTP 7 Professional GlobalSCAPE CuteFTP 8 Home GlobalSCAPE CuteFTP 8 Professional GoFTP Ipswitch WS_FTP LeapWare LeapFTP LeechFTP LinasFTP MAS-Soft FTPInfo MS IE FTP