Search
Keyword: js_nindya.a
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This site is related to the detection JS_OBFUS.AB. Users may encounter this site via Facebook , specifically a series of spam messages that leverage Osama bin Laden's death . This site redirects to
download its configuration file: http://{BLOCKED}natown.info/sqlvarch.php NOTES: The malware is installed as a Google Chrome extension or Mozilla Firefox add-on using the following names: Mozilla Service
Other Details This Trojan redirects browsers to the following sites: http://holcombewaller.com/xxx.html Redirects Internet browsers to a website
in PDF files usually download or drop another malware on the affected system. As a result, malicious routines of downloaded/dropped files are exhibited on the affected system.
Other Details This Trojan redirects browsers to the following sites: http://myhometourgallery.com/xxx.html Redirects Internet browsers to a website
This Trojan drops the files. Installation This Trojan creates the following folders: C:\Documents and Settings\All Users\Application Data\adhhh Dropping Routine This Trojan drops the following files:
However, as of this writing, the said sites are inaccessible. It inserts an IFRAME tag that redirects users to certain URLs. Backdoor Routine However, as of this writing, the said sites are
Arrival Details This unknown may be unknowingly downloaded by a user while visiting the following malicious websites: http://{BLOCKED}n/yahoo.js Other Details This unknown attempts to access the
This is the Trend Micro detection for files that exhibit certain behaviors. Other Details This is the Trend Micro detection for: script files that contain a malicious JavaScript code.
{String}',%User Temp\{Random numbers.exe}');Start-Process '%User Temp\{Random numbers.exe} Download Routine This Trojan connects to the following website(s) to download and execute a malicious file: http://
This Trojan may be dropped by other malware. Arrival Details This Trojan may be dropped by the following malware: TROJ_POWLOAD.AUSJRV Installation This Trojan drops the following files: %User Temp%
product detects a file under this detection name, do not execute the file.
Download Routine This Trojan connects to the following website(s) to download and execute a malicious file: http://www.{BLOCKED}azsg.cba.pl/09u9jn87?fYwsQY=iALPWjYXGdo ip: 95.211.144.65 http://{BLOCKED}.
Download Routine This Trojan connects to the following website(s) to download and execute a malicious file: http://{BLOCKED}spirazioni.com/pujrm http://{BLOCKED}ce.com/~test1/nxu2j8c http://www.{BLOCKED
This adware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It arrives as a component bundled with malware/grayware
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a