Search
Keyword: Coinminer_MALXMR.SMGH2-ELF64
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to certain websites to send and receive
This spyware may be downloaded by other malware/grayware/spyware from remote sites. It connects to certain websites to send and receive information. It deletes itself after execution. Arrival Details
|WantMoney8|WantMoney9|WantMoney10 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ WantMoney1|WantMoney2|WantMoney3|WantMoney4|WantMoney5|WantMoney6|WantMoney7|WantMoney8|WantMoney9|WantMoney10 EditFlags = 2
" HKEY_CURRENT_USER\Software\Adobe\ Acrobat Reader\10.0\Security\ cASPKI\cASPKI\cCustomCertPrefs\ c312E322E3834302E3131343032312E310000\cAdobe_ChainBuilder\cAcceptablePolicyOIDs\ c1 iEnd = "2" HKEY_CURRENT_USER
" HKEY_CURRENT_USER\Software\Adobe\ Acrobat Reader\10.0\Security\ cASPKI\cASPKI\cCustomCertPrefs\ c312E322E3834302E3131343032312E310000\cAdobe_ChainBuilder\cAcceptablePolicyOIDs\ c1 iEnd = "2" HKEY_CURRENT_USER
CVE-2014-0301 This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user opens a specially crafted image
(MS13-096) Vulnerability in Microsoft Graphics Component Could allow Remote Code Execution (2908005) 
2008 for x64-based Systems Service Pack 2,Windows Server 2008 for Itanium-based Systems Service Pack 2,Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation),Windows Server 2008
" HKEY_CURRENT_USER\Software\Adobe\ Acrobat Reader\10.0\Security\ cASPKI\cASPKI\cCustomCertPrefs\ c312E322E3834302E3131343032312E310000\cAdobe_ChainBuilder\cAcceptablePolicyOIDs\ c1 iEnd = "2" HKEY_CURRENT_USER
\cAcceptablePolicyOIDs\ c1 iEnd = "2" HKEY_CURRENT_USER\Software\Adobe\ Acrobat Reader\10.0\Security\ cASPKI\cASPKI\cCustomCertPrefs\ c312E322E3834302E3131343032312E310000\cAdobe_ChainBuilder\cAcceptablePolicyOIDs\ c1
CVE-2011-0029 This update resolves a vulnerability in Windows Remote Desktop Client, which could allow remote code execution. The exploit works if a user opens a legitimate Remote Desktop
CVE-2010-0019,CVE-2010-1898 This security update addresses two vulnerabilities in Microsoft .NET Framework and Microsoft Silverlight. The said vulnerabilities could allow remote code execution
CVE-2011-2014 This security update resolves a privately reported vulnerability in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD
CVE-2011-3406 This security update resolves a privately reported vulnerability in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD
Pack 2 (Server Core installation),Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation),Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation
x64-based Systems Service Pack 1,Windows Server 2008 R2 for Itanium-based Systems Service Pack 1,Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation),Windows Server 2003 Service
Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation),Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation),Windows Server 2008 R2 for x64-based Systems
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
" HKEY_CURRENT_USER\Software\Adobe\ Acrobat Reader\10.0\Security\ cASPKI\cASPKI\cCustomCertPrefs\ c312E322E3834302E3131343032312E310000\cAdobe_ChainBuilder\cAcceptablePolicyOIDs\ c1 iEnd = "2" HKEY_CURRENT_USER
\CurrentVersion\Uninstall\ archive 10.2.01 VersionMinor = "2" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Uninstall\ archive 10.2.01 Publisher = "extra compressed" HKEY_LOCAL_MACHINE\SOFTWARE