Search
Keyword: troj per cent5fmdropper per cent2ebh
file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Dropping Routine This Trojan drops the following files: %User Temp%\~!#1.tmp %User Temp%\~!#2.tmp
Profile%\{8a24c031-62fe-4bf5-94f0-bfd4fbcd674b}\yokphps.exe (Note: %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP, and Server
following folders: %System Root%\N$1-234-1323-78-4-2442 %System Root%\N$1-234-1323-78-4-2442\1-234-1323-78-4-2442 %System Root%\N$1-234-1323-78-4-2442\1-234-1323-78-4-24421-234-1323-78-4-2442 %Windows%\N
file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Dropping Routine This Trojan drops the following files: %User Temp%\~!#1.tmp %User Temp%\~!#2.tmp
Installation This Trojan drops the following files: %User Temp%\75.tmp %User Temp%\6F.tmp %User Temp%\48.tmp %User Temp%\71.tmp %User Temp%\4A.tmp %User Temp%\56.tmp %User Temp%\5F.tmp %User Temp%
Application adds the following processes: "%User Temp%\is-0NCVN.tmp\{malware file name}.tmp" /SL5="$30168,1089134,56832,{malware file path and name}" (Note: %User Temp% is the current user's Temp folder, which
file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Dropping Routine This spyware drops the following files: %User Temp%\~!#1.tmp %User Temp%\~
{malware path and file name} /r" Other System Modifications This Trojan deletes the following files: 00000000.res %User Profile%\Sample Pictures\Blue hills.jpg %User Profile%\Sample Pictures\Sunset.jpg %User
file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Installation This Trojan drops the following copies of itself into the affected system: %Windows%
file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Dropping Routine This Trojan drops the following files: %User Temp%\~!#1.tmp %User Temp%\~!#2.tmp
Root%\calender\{malware file name} (Note: %System Root% is the Windows root folder, where it usually is C:\ on all Windows operating system versions.) It creates the following folders: %System Root%
file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Installation This Trojan creates the following folders: %System Root%\msg TaskData %System Root%
Installation This Trojan drops the following files: %User Temp%\46.tmp %User Temp%\54.tmp %User Temp%\3C.tmp %User Temp%\6C.tmp %User Temp%\4C.tmp %User Temp%\40.tmp %User Temp%\63.tmp %User Temp%
\ GitForWindows lcZd7OY = ".2h29g" HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ GitForWindows sLF86MWC = "{random characters}" Dropping Routine This Ransomware drops the following files: %System Root%\Python27\Lib
file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Dropping Routine This Trojan drops the following files: %System Root%/exp/ebmqldp.exe %System
dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Installation This worm drops the following copies of itself into the affected system: %System%\Winkql.exe
\ GitForWindows lcZd7OY = ".66to56856" HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ GitForWindows sLF86MWC = "{random characters}" Dropping Routine This Ransomware drops the following files: %System Root%\Python27
file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Installation This Trojan creates the following folders: %User Profile%\CryptnetUrlCache\MetaData
Routine This Ransomware drops the following files: %System Root%\Python27\include\methodobject.h.x59000 %System Root%\Python27\Lib\test\test_cookie.py %System Root%\Python27\Lib\encodings\cp862.py.x59000
following copies of itself into the affected system: %System%\winupdate.exe (Note: %System% is the Windows system folder, which is usually C:\Windows\System32.) Autostart Technique This Trojan adds the