Search
Keyword: htmlbagleq1
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and Folder
= "0" HKEY_CURRENT_USER\Software\Microsoft\ Internet Account Manager\Accounts\Bigfoot LDAP Server ID = "1" HKEY_CURRENT_USER\Software\Microsoft\ Internet Account Manager\Accounts\VeriSign LDAP Server
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
\CurrentVersion\Shell Extensions\ Cached {random string} = "\x01\x00\x00\x00\x00\x00\x00\x00l\x95R\x0c\xa6\x8c\xd5\x01" HKEY_CURRENT_USER\Software\Youxun\ stat box_users = "1" HKEY_CURRENT_USER\Software\Youxun
\x00BY\xd5\xddw&\xd5\x01" HKEY_CURRENT_USER\Software\Microsoft\ RestartManager\Session0000 SessionHash = "{random characters}" HKEY_CURRENT_USER\Software\Microsoft\ RestartManager\Session0000 Sequence = "1
\Microsoft\ RestartManager\Session0000 Sequence = "1" Dropping Routine This Adware drops the following files: %AppDataLocal%\Microsoft\Internet Explorer\Recovery\High\Active\
This Potentially Unwanted Application arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to certain
the following registry entry(ies) to disable Task Manager, Registry Tools and Folder Options: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Policies\ system DisableTaskMgr = "1" It
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This spyware may be downloaded by other malware/grayware from remote sites. It does not have any propagation routine. It does not have any backdoor routine. It does not drop any other file. It
ClassManagerFlags = "1" HKEY_CURRENT_USER\Software\Microsoft\ ActiveMovie\devenum\{33D9A760-90C8-11D0-BD43-00A0C911CE86}\ iv32 FriendlyName = "Intel Indeo(R) Video R3.2" HKEY_CURRENT_USER\Software\Microsoft
adds the following registry entries: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center UacDisableNotify = "1" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center\Svc AntiVirusOverride = "1
\ ARPCache\MineService Changed = "1" HKEY_LOCAL_MACHINE\SOFTWARE\MineService\ Status startup = "2012-03-16 00:47:53" Dropping Routine This Trojan drops the following files: %User Temp%\nsw2.tmp\SelfDel.dll
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This backdoor arrives on a system as a
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ CLSID\{88E69D5B-DC58-42aa-8E30-03942D5C762E}\MiscStatus\ 1 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ CLSID\{88E69D5B-DC58-42aa-8E30-03942D5C762E}\TypeLib HKEY_LOCAL_MACHINE\SOFTWARE
\Bigfoot LDAP Server ID = "1" HKEY_CURRENT_USER\Software\Microsoft\ Internet Account Manager\Accounts\VeriSign LDAP Server ID = "2" HKEY_CURRENT_USER\Software\Microsoft\ Internet Account Manager\Accounts
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
\ Internet Account Manager\Accounts\Active Directory GC LDAP Server ID = "0" HKEY_CURRENT_USER\Software\Microsoft\ Internet Account Manager\Accounts\Bigfoot LDAP Server ID = "1" HKEY_CURRENT_USER\Software
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a