Search

PUA.JS.TwinFlower.A

Unwanted Application adds the following registry entries: HKEY_CURRENT_USER\Software\VB and VBA Program Settings ck_m = "2a94d5ecfd854f7a812438df4d48ff50" HKEY_CURRENT_USER\Software\VB and VBA Program

Trojan.Win32.FAREIT.UHBAZCLMA

\Software\VB and VBA Program Settings\ Thoracalgia4\Eksternaternes9 Roup7 = "GODFATHERS" HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ ENWEAVE\NONTRANSITIVELY Amphogeny = "Trevangsbrugets" This

TrojanSpy.Win32.FAREIT.UHBAZCLLW

HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ Thoracalgia4\Eksternaternes9 Roup7 = "GODFATHERS" HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ ENWEAVE\NONTRANSITIVELY Amphogeny = "Trevangsbrugets

TSPY_ZBOT.BDNG

HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ SrvID\ID HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ INSTALL\DATE It adds the following registry entries: HKEY_CURRENT_USER\Software\VB and VBA

WORM_INSLO.DU

\Profiles\{user name} on Windows NT, and C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003.) It adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program

TROJ_BANKER.WHI

HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ SrvID\ID HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ INSTALL\DATE It adds the following registry entries: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft

WORM_AINSLOT.DS

C:\Users\{user name}\AppData\Local\Temp on Windows Vista and 7.) It adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ SrvID\ID HKEY_CURRENT_USER\Software\VB and

WORM_AINSLOT.VTH

System Modifications This worm adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ SrvID\ID HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ INSTALL\DATE It

PUA.Win32.RemoteAdmin.AG

Potentially Unwanted Application adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ SmpcApp HKEY_CURRENT_USER

WORM_VBNA.LY

dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Other System Modifications This worm adds the following registry keys: HKEY_CURRENT_USER\Software\VB and

WORM_VOBFUS.QE

dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Other System Modifications This worm adds the following registry keys: HKEY_CURRENT_USER\Software\VB and

TROJ_MSPOSER.BS

\Software\VB and VBA Program Settings\ Explorer\Process It adds the following registry entries: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ Explorer\Process LO = "1" This report is generated via

TROJ_BANCOS.XCBB

HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ ml\cx HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ ml\inst HKEY_CLASSES_ROOT\Plugin.WindowsMediaPlayer\Clsid HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft

TSPY_BANCOS.XJMN

HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ ml\cx HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ ml\inst HKEY_CLASSES_ROOT\Plugin.WindowsMediaPlayer\Clsid HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft

TROJ_BEEBONE.CS