Search
Keyword: Coinminer_MALXMR.SMGH2-ELF64
CVE-2011-1977 This security update resolves a vulnerability in ASP.NET Chart controls that when exploited, could allow information disclosure. To exploit the vulnerability, a remote attacker may send
CVE-2011-1967 This security update resolves a privately reported vulnerability in Microsoft Windows . The vulnerability could allow elevation of privilege if an attacker logs on to an affected system
This security update addresses a vulnerability in Microsoft .NET Framework, which may lead to information disclosure once user views a malicious web page via a browser that runs XBAPs. Windows XP
CVE-2011-1991 This security update fixes a disclosed vulnerability in Windows , which could allow arbitrary code execution if users open legitimate .RTF, .TXT, or .DOC files located in the same
CVE-2012-0003 This security update resolves two privately reported vulnerabilities in Microsoft Windows . The vulnerabilities could allow remote code execution if a user opens a specially crafted
CVE-2012-0001 This security update resolves a privately reported vulnerability in Microsoft Windows . The vulnerability could allow an attacker to bypass the SafeSEH security feature in a software
CVE-2012-0013 This security update resolves a privately reported vulnerability in Microsoft Windows . The vulnerability could allow remote code execution if a user opens a specially crafted Microsoft
CVE-2012-0152 This is a denial of service vulnerability that exists in the way Remote Desktop Protocol service processes packets. An attacker who successfully exploited this vulnerability could lead
CVE-2011-5046,CVE-2012-0154 This security update resolves a privately reported vulnerability and a publicly disclosed vulnerability in Microsoft Windows. The more severe of these vulnerabilities
(MS12-018) Vulnerability in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2641653) 
CVE-2012-0157 This security update resolves a privately reported vulnerability in Microsoft Windows . The vulnerability could allow elevation of privilege if an attacker logs on to a system and runs
CVE-2011-1253 This update resolves a privately reported vulnerability in Microsoft .NET Framework and Microsoft Silverlight. The vulnerability could allow remote code execution on a client system if
CVE-2011-1247 This update resolves a privately reported vulnerability in the Microsoft Active Accessibility component. The vulnerability could allow remote code execution if an attacker convinces a
CVE-2011-1985,CVE-2011-2002,CVE-2011-2003,CVE-2011-2011 This update resolves four privately reported vulnerabilities in Microsoft Windows. The most severe of these vulnerabilities could allow remote
CVE-2011-3402 This security update resolves a publicly disclosed vulnerability in Microsoft Windows . The vulnerability could allow remote code execution if a user opens a specially crafted document
CVE-2011-3397 This security update resolves a privately reported vulnerability in Microsoft software. The vulnerability could allow remote code execution if a user views a specially crafted Web page
CVE-2011-3408 This security update resolves a privately reported vulnerability in Microsoft Windows . The vulnerability could allow elevation of privilege if an attacker logs on to an affected system
is found, it will write the output to the file "dxfs32.dll". It also encrypts the stolen data using a XOR encryption. It uses the following regular expression to search for track 1 and track 2 data on
"F367930B6F17E3B2E5" HKEY_LOCAL_MACHINE\SOFTWARE\5DFAD47D3556F8EEDC B067898B15B669F8 = "B067898B15B669F8" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Setup LogLevel = "2" HKEY_LOCAL_MACHINE\SOFTWARE
\VeriSign LDAP Server ID = "2" HKEY_CURRENT_USER\Software\Microsoft\ Internet Account Manager\Accounts\WhoWhere LDAP Server ID = "3" HKEY_CURRENT_USER\Software\Microsoft\ Internet Account Manager Server ID =
This Worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and Folder