Search
Keyword: yahoo
worm adds the following registry entries to enable its automatic execution at every system startup: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%
(Note: %System% is the Windows system folder, which is usually C:\Windows\System32.. %Windows% is the Windows folder, which is usually C:\Windows.) It adds the following processes: Google Talk Yahoo
DONBOT, also known as BUZUS or BACHSOY is a botnet notorious for spamming emails. It also spammed shortened URLs via instant messaging applications such as Yahoo Messenger and MSN to spread malicious
the user: iexplore.exe firefox.exe chrome.exe It intercept search strings in the following Web Sites: Google Bing Yahoo The gathered data is sent to the above-mentioned IP addresses. It can also
\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\SSVICHOSST.exe" It modifies the following registry entries to ensure it automatic execution at every system startup: HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\scvhost.exe" It modifies the following registry entries to ensure it automatic execution at every system startup:
\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\system3_.exe" It modifies the following registry entries to ensure it automatic execution at every system startup: HKEY_LOCAL_MACHINE\SOFTWARE
at every system startup: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\scvhost.exe" It modifies the following registry entries to ensure it automatic
following registry entries to enable its automatic execution at every system startup: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\RVHOST.exe" It modifies the
messages that contain links to sites hosting remote copies of itself using the following instant-messaging (IM) applications: Google Talk ICQ MSN Messenger Paltalk Skype Xfire Yahoo Messenger Dropping
startup: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\scvshosts.exe" It modifies the following registry entries to ensure it automatic execution at every
worm adds the following registry entries to enable its automatic execution at every system startup: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%
\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\RVHOST.exe" It modifies the following registry entries to ensure it automatic execution at every system startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\SCVHSOT.exe" It modifies the following registry entries to ensure it automatic execution at every system startup:
2008, and Windows Server 2012.) Information Theft This spyware attempts to steal stored email credentials from the following: Yahoo Hotmail Pidgin Eudora Outlook Express Incredimail MS Outlook
\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\SSVICHOSST.exe" It modifies the following registry entries to ensure it automatic execution at every system startup: HKEY_LOCAL_MACHINE
\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\SSVICHOSST.exe" It modifies the following registry entries to ensure it automatic execution at every system startup: HKEY_LOCAL_MACHINE
\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\SSVICHOSST.exe" It modifies the following registry entries to ensure it automatic execution at every system startup: HKEY_LOCAL_MACHINE
\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\RVHOST.exe" Other System Modifications This Worm adds the following registry entries: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ Microsoft
\CURRENTVERSION\Run Yahoo Messengger = %System%\system3_.exe It modifies the following registry entry(ies) to enable its automatic execution at every system startup: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\ WINDOWS