Keyword: vb
3275 Total Search   |   Showing Results : 201 - 220
  Previous   Next  
TROJ_DROPPER.VOR
Settings\{user name}\Local Settings\Application Data on Windows 2000, XP, and Server 2003.) It adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ SrvID\ID
TROJ_AGENT.BXPE
name}\Local Settings\Application Data on Windows 2000, XP, and Server 2003.) It adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ SrvID\ID HKEY_CURRENT_USER
WORM_VB.SMEV
following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ Paranoid\Addins HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\Policies\ Explorer\Run HKEY_CURRENT_USER\Software
TROJ_AGENT.AXJU
the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ tm\x It adds the following registry entries: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ tm\x x = "x
TROJ_SWISYN.SMP
the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ tm\x It adds the following registry entries: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ tm\x x = "x
WORM_COSMU.SMD
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ diaco\Settings HKEY_LOCAL_MACHINE\software\microsoft\ windows\currentversion\group policy\ state\machine\scripts\ startup\0\0 HKEY_LOCAL_MACHINE\software
TSPY_KEYLOG.YYMI
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ Microsoft\Sysinternals It adds the following registry entries: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ Microsoft\Sysinternals PROCID = "5650
TSPY_LMIR.RZ
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ WindowFiles HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ WindowFiles\DefaultIcon HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ WindowFiles\Shell\Open\ Command HKEY_CURRENT_USER\Software\VB and VBA
TROJ_AGENT.AFOA
the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ tm\x It adds the following registry entries: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ tm\x x = "x
TSPY_LEGMIR.XG
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ WindowFiles HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ WindowFiles\DefaultIcon HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ WindowFiles\Shell\Open\ Command HKEY_CURRENT_USER\Software\VB and VBA
TROJ_BANLOAD.YWNOQ
\Software\VB and VBA Program Settings\ ml\cx HKEY_CLASSES_ROOT\plugin.AcrobatReader5 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ plugin.AcrobatReader5\clsid It adds the following registry entries: HKEY_CURRENT_USER
BKDR_SHARK.AT
boredcoders = "%Windows%:Server.bat" Other System Modifications This backdoor adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ Setup\1765683 HKEY_LOCAL_MACHINE\SOFTWARE
WORM_AUTORUN.FPW
is usually C:\Windows\Temp.) It adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ VB6 API Loader\AppSettings HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ AppID\
WORM_LUDER.CE
Components\{3EFAECFA-5544-BD6E-CCED-AC9A6C5BEEF2} HKEY_CURRENT_USER\SOFTWARE\Microsoft\ Active Setup\Installed Components\{3EFAECFA-5544-BD6E-CCED-AC9A6C5BEEF2} HKEY_CURRENT_USER\Software\VB and VBA Program
TROJ_AGENT.NT
name} on Windows 2000, XP, and Server 2003, or C:\Users\{user name} on Windows Vista and 7.) It adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ SrvID\ID
TROJ_JORIK.DBP
Settings\{user name} on Windows 2000, XP, and Server 2003.) It adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ SrvID\ID HKEY_CURRENT_USER\Software\VB and VBA Program
TROJ_OBFUSCAT.AO
{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\1.0\ 0 HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ myapp\Setting It adds the following registry entries: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ myapp\Setting Setting =
TROJ_ROSYALAD.A
%User Profile%\Microsoft\FlashPlugin.exe" Other System Modifications This Trojan adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ eklenti\ayar It adds the
WORM_ARHOST.AC
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ Microwsoft\addIns It adds the following registry entries: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ Microwsoft\addIns FS = "1" HKEY_LOCAL_MACHINE
TROJ_BANLOAD.YWNOF
\Software\VB and VBA Program Settings\ ml\cx HKEY_CLASSES_ROOT\plugin.AcrobatReader5 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ plugin.AcrobatReader5\clsid It adds the following registry entries: HKEY_CURRENT_USER