Search
Keyword: yahoo
\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\scvhosti.exe" It modifies the following registry entries to ensure it automatic execution at every system startup:
HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\scvhost.exe" It modifies the following registry entries to ensure it automatic execution at every system startup:
\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\IEXPLORER.exe" It modifies the following registry entries to ensure it automatic execution at every system startup:
\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\SCVHOST.exe" It modifies the following registry entries to ensure it automatic execution at every system startup:
the following registry entries to enable its automatic execution at every system startup: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\SSVICHOSST.exe
sends messages that contain links to sites hosting remote copies of itself using the following instant-messaging (IM) applications: Yahoo Messenger MSN Messenger Backdoor Routine This worm connects to the
\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\scvhosti.exe" It modifies the following registry entries to ensure it automatic execution at every system startup:
HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\SSCVIHOST.exe" It modifies the following registry entries to ensure it automatic execution at every system startup:
HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\scvhost.exe" It modifies the following registry entries to ensure it automatic execution at every system startup:
automatic execution at every system startup: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\RVHOST.exe" It modifies the following registry entries to ensure it
GOOGLEBOT SLURP YAHOO BING LINUX OPENBSD MACINTOSH MAC OS IPHONE SYMBIANOS NOKIA LINKDEX FROG/1 UQER-AGENT BLACKBERRY MOTOROLA APPLE-PUB AKREGATOR SONYERICSSON MACBOOK XENU LINK METAURI REEDER MOODLEBOT
registry entries to enable its automatic execution at every system startup: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\IEXPLORER.exe" It modifies the
Messenger (In Windows XP) Windows Live Messenger (In Windows XP And Vista) Yahoo Messenger (Versions 5.x and 6.x) Google Talk ICQ Lite 4.x/5.x/2003 AOL Instant Messenger v4.6 or below, AIM 6.x, and AIM Pro.
Live LogMeIn Megaupload Moneybookers NoIP OfficeBanking Passwd Password PayPal Runescape Steam TextfieldEmail TextfieldPassword Twitter Yahoo YouTube email login loginId loginUserName loginUserPassword
enable its automatic execution at every system startup: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\regsvr.exe" It modifies the following registry entries
\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\regsvr.exe" It modifies the following registry entries to ensure it automatic execution at every system startup: HKEY_LOCAL_MACHINE
\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\regsvr.exe" It modifies the following registry entries to ensure it automatic execution at every system startup: HKEY_LOCAL_MACHINE
Technique This worm adds the following registry entries to enable its automatic execution at every system startup: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%
of itself into the affected system: %system%\csrcs.exe It bears the file icons of the following applications: Yahoo Messenger It uses common file icons to trick a user into thinking that the files are
every system startup: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Yahoo Messengger = "%System%\scvhost.exe" Other System Modifications This worm modifies the following registry keys: