Search
Keyword: troj_crypctb
Trojans or Trojan horse programs refer to a family of malware that carry payloads or other malicious actions that can range from the mildly annoying to the irreparably destructive. They can also
This Trojan may be dropped by other malware. Arrival Details This Trojan may be dropped by the following malware: TROJ_PDFJS.MM Autostart Technique This Trojan adds the following registry entries to
Installation This Trojan drops the following copies of itself into the affected system: %User Profile%\Application Data\Microsoft\imipapi.exe (Note: %User Profile% is the current user's profile
Upon execution, it displays a GUI indicating the installation of a rogue antivirus called Internet Protection. While doing so, it downloads its component file from the a certain URL via HTTP GET. If
This Trojan may be downloaded by other malware/grayware/spyware from remote sites. It may be dropped by other malware. It may be unknowingly downloaded by a user while visiting malicious websites.
This Trojan arrives as a file that exports the functions of other malware/grayware. It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes the downloaded files. As a result, malicious
Installation This Trojan drops the following copies of itself into the affected system: %system root%\userini.exe Autostart Technique This Trojan adds the following registry entries to enable its
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes the downloaded files. As a result, malicious
This Trojan arrives as a file that exports the functions of other malware/grayware. It may arrive bundled with malware packages as a malware component. It arrives on a system as a file dropped by
This Trojan has received attention from independent media sources and/or other security firms. To get a one-glance comprehensive view of the behavior of this Trojan, refer to the Threat Diagram shown
This Trojan may be dropped by other malware. It may be unknowingly downloaded by a user while visiting malicious websites. It may be manually installed by a user. It deletes itself after execution.
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It employs registry shell spawning by adding certain
This Trojan may be dropped by other malware. It may be unknowingly downloaded by a user while visiting malicious websites. It bears the file icons of certain applications to avoid easy detection and
This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users. Arrival Details This Trojan arrives as an attachment to email messages spammed by other
This Trojan deletes itself after execution. Installation This Trojan drops the following copies of itself into the affected system: C:\Documents and Settings\All Users\Application Data\{random folder
Other Details This Trojan does the following: It connects to malicious sites to download fraud applications onto the affected system. As a result, malicious routines of downloaded files are exhibited
Other System Modifications This Trojan adds the following registry keys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Tracing\BAP HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Tracing\PPP HKEY_LOCAL_MACHINE
Other Details This Trojan displays the following images: It does the following: It opens Internet Explorer and connects to the following Google search query: http://www.google.com/search?q
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes the dropped file(s). As a result, malicious