Search
Keyword: URL
Settings\Temp on Windows 2000, XP, and Server 2003.) NOTES: This Trojan downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the parameter
packages. It downloads a file from a certain URL then renames it before storing it in the affected system. It executes the downloaded files. As a result, malicious routines of the downloaded files are
http://208.110.85.172/bl.js Other Details This Trojan does the following: It is capable of following in the affected user's Facebook account: Post links to friends walls Send url to online friends via Chat Subscribe as a Fan
svchost.exe Other Details This Trojan deletes the initially executed copy of itself NOTES: It connects to the following URL to report system infection: http://{BLOCKED}ayom2001.ru/forum3/task.php?bid={parameter
This Trojan may be downloaded using malicious QR codes. Once the malicious QR code is scanned, the user will be redirected to a URL where the malicious file can be downloaded. It then sends text
This Trojan downloads the file from the following URL and renames the file when stored in the affected system: http://{BLOCKED}ensourcecms.com/include/o.exe http://{BLOCKED
URL using the default browser of the affected system Force the user to input login credentials Shutdown the remote computer Restart the remote computer Put the system into sleep mode Send a message
that calls B.CLASS to decrypt a URL that is passed to it then downloads and executes the file. The said routine takes advantage of a vulnerability in the Java Runtime Environment component in Oracle Java
the following URL to possibly inform the remote user of an infection or to receive more information: http://bravox0005.{BLOCKED}pg.com.br/vtoken.html
file from the URL http://{BLOCKED}.{BLOCKED}.100.171/manual/a.c and saves it as /tmp/a.c . The downloaded file is detected as TROJ_KAITEN.A. Using the installed GNU compiler, it compiles /tmp/a.c to
data contains the following: As of this writing, it downloads an arbitrary file from the URL http://u10374.{BLOCKED}s.hc.ru/test1.zip as file2.exe . It creates the following registry entry to enable
on Windows Vista and 7.) Download Routine This malware downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the parameter passed on to
of the downloaded files are exhibited on the affected system. It downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the parameter
of the downloaded files are exhibited on the affected system. It downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the parameter
from a certain URL. The URL where this malware downloads the said file depends on the following parameter(s) passed on to it by its components: val prime Other Details This Trojan requires its main
then executes the downloaded files. As a result, malicious routines of the downloaded files are exhibited on the affected system. It downloads a possibly malicious file from a certain URL. The URL where
then executes the downloaded files. As a result, malicious routines of the downloaded files are exhibited on the affected system. It downloads a possibly malicious file from a certain URL. The URL where
then executes the downloaded files. As a result, malicious routines of the downloaded files are exhibited on the affected system. It downloads a possibly malicious file from a certain URL. The URL where
perform its intended routine. NOTES: This is a Java class file that is used to execute an exploit code. Once successful, it may download a possibly malicious file from a certain URL. The URL where this
then executes the downloaded files. As a result, malicious routines of the downloaded files are exhibited on the affected system. It downloads a possibly malicious file from a certain URL. The URL where