Search
Keyword: JS_XORBAT.A
users to click on a link that appears to lead to a video. The video is fake but is hosted on a site that imitates YouTube. The site then gets users to install a file to view the video, but the file is
This Trojan adds certain registry entries to disable the Task Manager. This action prevents users from terminating the malware process, which can usually be done via the Task Manager. Installation
This spyware may be dropped by other malware. It may be unknowingly downloaded by a user while visiting malicious websites. It creates folders where it drops its files. It modifies the Internet
}zbilnyak.cn/ittit/doc.bin It attempts to access a website to download a file which contains information where the Trojan can download an updated copy of itself, and where to send its stolen data. This configuration file also
This Trojan may be hosted on a website and run when a user accesses the said website. Arrival Details This Trojan may be hosted on a website and run when a user accesses the said website. Other
However, as of this writing, the said sites are inaccessible. This is the Trend Micro detection for Web pages that were compromised through the insertion of a certain malicious script. Once a
Arrival Details This malware arrives via the following means: This malware is written in the registry by TROJ_POWELIKS.A Download Routine This Trojan accesses the following websites to download
Installation This adware drops the following files: %Program Files%\HBLite\bin\11.0.384.0\HBLiteSA.exe (Note: %Program Files% is the default Program Files folder, usually C:\Program Files in Windows
This hacking tool may be hosted on a website and run when a user accesses the said website. Arrival Details This hacking tool may be hosted on a website and run when a user accesses the said website.
This Trojan may be downloaded by other malware/grayware from remote sites. It downloads a file from a certain URL then renames it before storing it in the affected system. It executes the downloaded
This Trojan may be unknowingly downloaded by a user while visiting malicious websites. It executes when a user accesses certain websites where it is hosted. Arrival Details This Trojan may be
This Trojan may be hosted on a website and run when a user accesses the said website. It inserts an IFRAME tag that redirects users to certain URLs. However, as of this writing, the said sites are
2009 and 2010. RUSTOCK also came as attachment to spammed email. RUSTOCK acts as a proxy server on affected systems. It uses this routine to send spammed messages. The content of the spammed messages
This Trojan may be hosted on a website and run when a user accesses the said website. It redirects browsers to certain sites. Arrival Details This Trojan may be hosted on a website and run when a
This Trojan may be hosted on a website and run when a user accesses the said website. Arrival Details This Trojan may be hosted on a website and run when a user accesses the said website.
This Trojan may be hosted on a website and run when a user accesses the said website. As of this writing, the said sites are inaccessible. Arrival Details This Trojan may be hosted on a website and
downloaded by a user while visiting the following malicious websites: http://{BLOCKED}et:81/sx14nx7/fda.exe Installation This spyware adds the following folders: %Application Data%\{random1} %Application Data%
(IE) activities of the affected system, specifically the address bar or title bar. It recreates a legitimate website with a spoofed login page if a user visits banking sites with the following strings
This Trojan may be hosted on a website and run when a user accesses the said website. It redirects browsers to certain sites. Arrival Details This Trojan may be hosted on a website and run when a
(IE) activities of the affected system, specifically the address bar or title bar. It recreates a legitimate website with a spoofed login page if a user visits banking sites with the following strings