Keyword: js
4700 Total Search   |   Showing Results : 81 - 100
  Previous   Next  
PUA.Win32.DownloadGuide.AX
Application creates the following folders: %User Temp%\DLG\ui\offers\1522ef138ba104249c3934a80811f825\js %User Temp%\DLG\ui\common\last\css %System Root%\Users %User Temp%\DLG\ui\offers
PUA.Win32.DownloadGuide.BJ
Application creates the following folders: %User Temp%\DLG\ui\offers\1522ef138ba104249c3934a80811f825\css %User Temp%\DLG\initWindow %User Temp%\DLG\ui\common\last\js %User Profile%\AppData %User Temp%\DLG\ui
PUA.Win32.DownloadGuide.BN
Application creates the following folders: %User Temp%\DLG\ui\common\last\css %User Temp%\DLG\ui\common\last\js %User Temp%\DLG\ui\offers %User Profile%\AppData %User Temp%\DLG\ui %User Temp%\DLG\ui\offers
PUA.Win32.DownloadGuide.BS
\common\last\img %User Temp%\DLG\ui\common\last\css %User Temp%\DLG\ui %User Temp%\DLG\dlgres %User Temp%\DLG\ui\common\base\css %User Temp%\DLG\ui\offers\1522ef138ba104249c3934a80811f825\js %User Temp%\DLG
PUA.Win32.DownloadGuide.BX
Application creates the following folders: %User Temp%\DLG\ui\common\progress\img %User Temp%\DLG\ui\common\progress\css %User Temp%\DLG\ui %User Profile%\AppData %User Temp%\DLG\ui\common\base\js %User Temp%
PUA.Win32.DownloadGuide.AL
\1522ef138ba104249c3934a80811f825\css %User Temp%\DLG\ui\common\last\js %User Temp%\DLG\ui\common\progress\css %User Temp%\DLG\ui\common\progress\img %User Temp%\DLG\ui\common\base %User Temp%\DLG\ui\offers
PUA.Win32.DownloadGuide.BG
Application creates the following folders: %User Temp%\DLG\initWindow\css %User Temp%\DLG\ui\common\last %User Temp%\DLG\ui\common\last\js %User Temp%\DLG\dlgres %User Temp%\DLG\ui\offers
PUA.Win32.DownGuide.CBX
Application creates the following folders: %User Temp%\DLG\ui\common\base %User Profile%\AppData %User Temp%\DLG\initWindow %User Temp%\DLG\ui\common\base\js %User Temp%\DLG\ui\offers
PUA.Win32.DownloadGuide.BT
Application creates the following folders: %User Temp%\DLG\loadingImage %User Temp%\DLG\ui\common\last %System Root%\Users %User Temp%\DLG\ui\common\base\js %User Temp%\DLG\ui\offers
PUA.Win32.ChipDownload.H
\DLG\ui\common %User Temp%\DLG\ui\common\last\js %System Root%\Users %User Temp%\DLG\ui\common\progress\img %User Temp%\DLG\ui\common\progress\js %User Temp%\DLG\ui\common\last %User Temp%\DLG %User Temp
PUA.Win32.DownGuide.CBV
Application creates the following folders: %User Temp%\DLG\ui\common\last\css %User Temp%\DLG\ui\common\last\js %User Temp%\DLG\ui\offers %User Temp%\DLG\ui\offers\261dd182d36861fec9a217cc812a9f9a\img %User
PUA.Win32.DownloadGuide.AQ
\1522ef138ba104249c3934a80811f825\js %User Temp%\DLG\ui\common\base\css %User Temp%\DLG\ui\common\progress\css %User Temp%\DLG\ui\common\last\js %User Temp%\DLG\ui\common %User Temp%\DLG\ui %User Temp%\DLG\ui\offers
TROJ_AGENT_012709.TOMB
{385BABE1-E44D-42A5-A09E-7201984735D1} %User Temp%\~zm_{385BABE1-E44D-42A5-A09E-7201984735D1}\css %User Temp%\~zm_{385BABE1-E44D-42A5-A09E-7201984735D1}\images %User Temp%\~zm_{385BABE1-E44D-42A5-A09E-7201984735D1}\js (Note: %User Temp%
TROJ_BANCOS.XBR
\nsupdate\js %System Root%\nsupdate\img (Note: %System Root% is the root folder, which is usually C:\. It is also where the operating system is located.) Dropping Routine This Trojan drops the following
ADW_SAFINS
\qs_6c1829d0\dialogs %User Temp%\qs_6c1829d0\dialogs\library %User Temp%\qs_6c1829d0\dialogs\library\css %User Temp%\qs_6c1829d0\dialogs\library\images %User Temp%\qs_6c1829d0\dialogs\library\js %User Temp%
PUA.Win32.WebCompanion.AA
%Desktop%\PDFCreator.lnk %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\GetPrinterDevices.js %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\MergedFiles2Tif.js %Program Files%\PDFCreator
ADW_INSTALBRAN
\DOCUME~1 %System Root%\DOCUME~1\Wilbert %User Profile%\LOCALS~1 %User Temp%\installer\gui %User Temp%\installer\gui\ib %User Temp%\installer\gui\conditions %User Temp%\installer\gui\js %User Temp%\installer
PUA.Win32.InstallMon.AA
\COM Scripts\JS Scripts\Basics\GetPrinterDevices.js %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\MergedFiles2Tif.js %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics
TROJ_POWELIKS.C
{return%20String.fromCharCode(_.charCodeAt()- 1);})) HKEY_LOCAL_MACHINE\Software\Classes\ CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32 a = {encoded JS script} HKEY_CLASSES_ROOT\CLSID\
PUA.Win32.YouXun.M
\box_new\layer-v2.1\layer\skin %Program Files%\YouWoBox\Cache\js %Application Data%\YouWoBox %Application Data%\Microsoft\Internet Explorer\Quick Launch\User Pinned %Program Files%\YouWoBox\standby F: