Search
Keyword: W2KM_DLOADER.BVFO
\SystemRestore DisableSR = 1 (Note: The default value data of the said registry entry is 0 .) HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Policies\ System DisableTaskMgr = 2 (Note: The default
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This spyware arrives on a system as a
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ Services\SharedAccess Start = "4" (Note: The default value data of the said registry entry is 2 .) It modifies the following registry entries to hide files with Hidden
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
This file infector arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival
This spyware arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It executes then deletes itself afterward. It does not have any propagation routine. It
This spyware arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It executes then deletes itself afterward. It does not have any propagation routine. It
This spyware arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It executes then deletes itself afterward. It does not have any propagation routine. It
\Explorer\ Advanced Hidden = "2" (Note: The default value data of the said registry entry is 2 .) Dropping Routine This Trojan drops the following files: %System Root%\autorun.exe %System Root%\autorun.inf
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This spyware arrives on a system as a
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This spyware arrives on a system as a
entry is %System Root%\System32\WScript.exe, 2 .) HKEY_CLASSES_ROOT\batfile\DefaultIcon (Default) = C:\WinWOW32\icon.ico (Note: The default value data of the said registry entry is %System Root%\System32
This Trojan Spy arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. However, as of this writing, the said sites are
This file infector arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It steals certain information from the system and/or
This threat downloads TROJ_CRIBIT.B, a ransomware that steals funds from various cryptocurrency wallets. To get a one-glance comprehensive view of the behavior of this Spyware, refer to the Threat
This backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It does not have any propagation routine. It is a
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This spyware arrives on a system as a
the said registry entry is 2 .) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center AntiVirusDisableNotify = "1" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center AntiVirusOverride = "1