Keyword: html_adostream2
42661 Total Search   |   Showing Results : 1 - 20
   Next  
POSSIBLE_SCRDL
This is the Trend Micro detection for suspicious files that manifest similar behavior and characteristics as the following malware: HTML_ADODB HTML_AGENT HTML_DLOADER HTML_IESLICE HTML_IFRAME
Ransom_FANTOMCRYPT.F116I1
\DECRYPT_YOUR_FILES.HTML %User Profile%\S-1-5-18\DECRYPT_YOUR_FILES.HTML %User Profile%\RSA\DECRYPT_YOUR_FILES.HTML %User Profile%\Crypto\DECRYPT_YOUR_FILES.HTML %User Profile%\HTML Help\DECRYPT_YOUR_FILES.HTML %User
Ransom_PETYA.M
\YOUR_FILES_ARE_ENCRYPTED.TXT %Windows%\pchealth\helpctr\System\sysinfo\graphics\YOUR_FILES_ARE_ENCRYPTED.HTML %System%\oobe\html\mouse\images\YOUR_FILES_ARE_ENCRYPTED.TXT %System%\oobe\html\mouse\images
RANSOM_CRYPGEN_GE01003E.UVPM
Tools\help\wwhelp\wwhimpl\js\images\spc_tabm.gif %System Root%\Program Files\VMware\VMware Tools\help\wwhelp\wwhimpl\common\html\init3.htm %System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors
ADW_MOBSERV
This adware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This adware arrives on a system as a
Trojan.Win32.DOFOIL.USXVPK319
\Office12\1033\GRINTL32.DLL %Program Files%\Common Files\microsoft shared\OFFICE12\HTML\context.html %Program Files%\Microsoft Office\Office12\SSGEN.DLL %Program Files%\Microsoft Office\Office12\ADDINS
TSPY_DYRE.YYSNZ
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It uses the Windows Task Scheduler to add a scheduled
TSPY_DYRE.XXA
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It uses Windows Task Scheduler to create a scheduled
TSPY_DYRE.SNU
This spyware may be dropped by other malware. It uses the Windows Task Scheduler to add a scheduled task that executes the copies it drops. It does not have any propagation routine. It connects to
TSPY_DYRE.YSR
This spyware may be dropped by other malware. It uses the Windows Task Scheduler to add a scheduled task that executes the copies it drops. It does not have any propagation routine. It connects to
TSPY_DYRE.DE
\CurrentControlSet\ Services\googleupdate Start = "2" HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ Services\googleupdate Type = "16" It registers as a system service to ensure its automatic execution at every system
TSPY_DYRE.EA
" HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ Services\ge DisplayName = "Google Update" HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ Services\ge Start = "2" It adds the following registry entries to enable its
Ransom.Win32.CRYSIS.TIBGET
Sidebar\Gadgets\MediaCenter.Gadget\images\button_right_mouseover.png %System Root%\Program Files\VMware\VMware Tools\help\wwhelp\wwhimpl\common\html\content.htm %System Root%\Program Files\Windows Sidebar
TSPY_DYRE.YYSMB
\ Services\googleupdate Start = "2" It adds the following registry entries to enable its automatic execution at every system startup: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run
TSPY_DYRE.SLU
"Google Update" HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ Services\googleupdate Start = "2" It adds the following registry entries to enable its automatic execution at every system startup:
Ransom_CRYPJAFF.END
\systemprofile\Templates\ReadMe.bmp %System%\config\systemprofile\Templates\ReadMe.html %System%\config\systemprofile\Templates\ReadMe.txt %System%\oobe\html\dslmain\ReadMe.bmp %System%\oobe\html\dslmain
Ransom_CRYPJAFF.ENF
\systemprofile\Templates\ReadMe.bmp %System%\config\systemprofile\Templates\ReadMe.html %System%\config\systemprofile\Templates\ReadMe.txt %System%\oobe\html\dslmain\ReadMe.bmp %System%\oobe\html\dslmain
Ransom_CRYPJAFF.ENJ
\Templates\README TO SAVE YOUR FILES.html %System%\config\systemprofile\Templates\README TO SAVE YOUR FILES.txt %System%\oobe\html\dslmain\README TO SAVE YOUR FILES.bmp %System%\oobe\html\dslmain\README TO
Ransom_CRYPJAFF.WLU
\systemprofile\Templates\README TO SAVE YOUR FILES.txt %System%\oobe\html\dslmain\README TO SAVE YOUR FILES.bmp %System%\oobe\html\dslmain\README TO SAVE YOUR FILES.html %System%\oobe\html\dslmain\README TO SAVE
Ransom_CRYPJAFF.ENG
\systemprofile\Templates\ReadMe.bmp %System%\config\systemprofile\Templates\ReadMe.html %System%\config\systemprofile\Templates\ReadMe.txt %System%\oobe\html\dslmain\ReadMe.bmp %System%\oobe\html\dslmain