Search
Keyword: JS_LOCKY.FS
folders: %System Root%\dnf\ %System Root%\lq\ %System Root%\mone\ %System Root%\mxd\ %System Root%\wow\ %System Root%\js\ %System Root%\dn\ %System Root%\rh\ %System Root%\lqyxz\ %System Root%\zq\ (Note:
Root%\dnf %System Root%\lq %System Root%\mone %System Root%\mxd %System Root%\wow %System Root%\js %System Root%\dn %System Root%\rh (Note: %System Root% is the root folder, which is usually C:\. It is
This Trojan may be hosted on a website and run when a user accesses the said website. It inserts an IFRAME tag that redirects users to certain URLs. Arrival Details This Trojan may be hosted on a
This is Trend Micro detection for compromised web pages through the insertion of JavaScript codes that redirects to specific web sites. This Trojan may be hosted on a website and run when a user
This JavaScript (JS) Trojan uses social engineering methods to lure users into performing certain actions that may, directly or indirectly, cause malicious routines to be performed. To get a
This Trojan may be downloaded by other malware/grayware from remote sites. However, as of this writing, the said sites are inaccessible. This is the Trend Micro detection for files that contain
This malware has received attention from independent media sources and/or other security firms. These indicate that this malware poses a high risk to users due to the increased possibility of
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. As of this writing, the said sites are inaccessible.
This Trojan may be unknowingly downloaded by a user while visiting malicious websites. Arrival Details This Trojan may be unknowingly downloaded by a user while visiting malicious websites. Other
This Trojan accesses websites to download files. This action allows this malware to possibly add other malware on the affected computer. It executes the downloaded files. As a result, malicious
Other Details Based on analysis of the codes, it has the following capabilities: It contains an iframe tag that points to the following URL: http://{BLOCKED}.com/10/umi.php - also detected as
This Trojan accesses websites to download files. This action allows this malware to possibly add other malware on the affected computer. It attempts to steal sensitive online banking information,
This spyware attempts to steal sensitive online banking information, such as user names and passwords. This routine risks the exposure of the user's account information, which may then lead to the
This spyware arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It is injected into all running processes to remain memory resident. It attempts to steal
This spyware may be dropped by other malware. It may be unknowingly downloaded by a user while visiting malicious websites. It creates folders where it drops its files. It modifies the Internet
This Trojan arrives as attachment to mass-mailed email messages. It redirects browsers to certain sites. Arrival Details This Trojan arrives as attachment to mass-mailed email messages. Other Details
This Trojan executes when a user accesses certain websites where it is hosted. It redirects browsers to certain sites. However, as of this writing, the said sites are inaccessible. Arrival Details
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This Trojan may be dropped by other malware. It requires its main component to successfully perform its intended routine. Arrival Details This Trojan may be dropped by the following malware:
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes the downloaded files. As a result, malicious