Search

Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-2444)

arbitrary code in the context of the current user. Internet Explorer 7,Internet Explorer 8,Internet Explorer 9,Internet Explorer 10,Internet Explorer 11 Vulnerability Protection in Trend Micro Deep Security

22-026 (June 4, 2022)

* indicates a new version of an existing rule Deep Packet Inspection Rules: Web Client Common 1011442 - Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

TROJ_AGENT_016278.TOMB

cmd.exe .) HKEY_CURRENT_USER\Software\Microsoft\ Windows NT\CurrentVersion\Windows load = "%Windows%\ActiveX.exe" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center FirewallOverride = "1

WORM_DOWNAD.FUF

said vulnerability can be found in this Microsoft Web page: Microsoft Security Bulletin MS08-067 Once this specially crafted RPC request reaches its target vulnerable system, the shellcode is decrypted,

PE_BLACKRID.A

its automatic execution at every system startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Run Microsoft Network Detection = "%System%\ntdetect.exe" Other System Modifications This

Trojan.Win32.DLOADR.AUSUSG

Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit).) It adds the following registry keys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security\secure It adds the following registry entries:

WORM_BAGLE.SMA

\Microsoft\ Windows\Security Center\Svc HKEY_CURRENT_USER\Software\bisoft It adds the following registry entries: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\Security Center\Svc EnableLUA = "16

TROJ_BAGLE.NZ

hkey_current_user\software\local appwizard-generated applications\ {malware file name}\settings HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\Security Center\Svc HKEY_CURRENT_USER\Software\bisoft It adds the

BKDR_BLACKHOL.JE

hkey_current_user\software\local appwizard-generated applications\ {malware file name}\settings HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\Security Center\Svc HKEY_CURRENT_USER\Software\bisoft It adds the

TROJ_YUMY.AI

This Trojan executes then deletes itself afterward. It lowers the security setting of Internet Explorer. Installation This Trojan drops the following copies of itself into the affected system and

TROJ_MSILJECT.AT