Search
Keyword: microsoft security bulletin ms03-007
CVE-2009-2500,MS09-062 Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project
(CVE-2023-27372) 1011743* - pgAdmin Import Servers Directory Traversal Vulnerability (CVE-2023-0241) Web Client Internet Explorer/Edge 1010857* - Microsoft Internet Explorer Memory Corruption Vulnerability
(CVE-2023-27372) 1011743* - pgAdmin Import Servers Directory Traversal Vulnerability (CVE-2023-0241) Web Client Internet Explorer/Edge 1010857* - Microsoft Internet Explorer Memory Corruption Vulnerability
HKEY_LOCAL_MACHINE\System\CurrentControlSet\ Control\Session Manager\AppCertDlls HKEY_CURRENT_USER\Software\AppDataLow\ Software\Microsoft\Internet Explorer\ Security\AntiPhishing\7926A403-841D-130B-56BD-F8F7EA41AC1B
\Microsoft\ Windows\CurrentVersion\Internet Settings\ Zones\4 2500 = "3" It adds the following registry keys as part of its installation routine: HKEY_CURRENT_USER\Software\Live Security Professional Web
or C:\Users\{user name} on Windows Vista and 7.) It creates the following folders: %System Root%\Documents and Settings\Wilbert %User Profile%\Microsoft\CLR Security Config %User Profile%\CLR Security
%System Root%\program files\kazaa\my shared folder\Microsoft Visual C++ KeyGen.exe %System Root%\program files\kazaa\my shared folder\Microsoft Visual Basic KeyGen.exe %System Root%\program files\kazaa\my
WarnonBadCertRecving = "0" HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Internet Settings CertificateRevocation = "0" Web Browser Home Page and Search Page Modification This Trojan lowers the security
\ Security Level = "4" HKEY_CURRENT_USER\Software\Microsoft\ Office\11.0\Word\ Security AccessVBOM = "0" HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run SCardSvr = "%User Profile%\Local
\ Security Level = "4" HKEY_CURRENT_USER\Software\Microsoft\ Office\11.0\Word\ Security AccessVBOM = "0" HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run SCardSvr = "%User Profile%\Local
\ Security Level = "4" HKEY_CURRENT_USER\Software\Microsoft\ Office\11.0\Word\ Security AccessVBOM = "0" HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run SCardSvr = "%User Profile%\Local
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ FCOVM HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ RemoveRP Web Browser Home Page and Search Page Modification This Trojan lowers the security setting of Internet Explorer. Dropping
of the said registry entry is Explorer.exe .) It also creates the following registry entry(ies) as part of its installation routine: HKEY_CURRENT_USER\Software\Microsoft\ Office\11.0\Word\ Security
\ Security Level = "4" HKEY_CURRENT_USER\Software\Microsoft\ Office\11.0\Word\ Security AccessVBOM = "0" HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run SCardSvr = "%User Profile%\Local
malicious sites. It lowers the security setting of Internet Explorer. Arrival Details This spyware may arrive bundled with malware packages as a malware component. It arrives on a system as a file dropped by
execution at every system startup: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Internet Security = "{Malware Path and File Name}.exe" Other Details This Trojan connects to the following
execution at every system startup: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Internet Security = "{Malware Path and File Name}.exe" Other Details This Trojan connects to the following
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Run {random value} = "%System%\{random}.exe" Other Details This backdoor connects to the following possibly malicious URL: xt.{BLOCKED}ere.biz ss.{BLOCKED
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Run {random value} = "%System%\{random}.exe" Other Details This worm connects to the following possibly malicious URL: xt.{BLOCKED}ere.biz ss.{BLOCKED
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Run {random value} = "%System%\{random}.exe" Other Details This backdoor connects to the following possibly malicious URL: xt.{BLOCKED}ere.biz ss.{BLOCKED