Search

website and run when a user accesses the said website. Download Routine This Trojan downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the

possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the parameter it passed to its components. Exploit:JS/ShellCode.BG(Microsoft)

Upon execution, this Trojan downloads and executes a shellcode from the following URL and executes it: http://www.{BLOCKED}m.com/new/admin/data/product/manager.php However, as of this writing, the said

Upon execution, this Trojan downloads and executes a shellcode from the following URL and executes it: http://www.{BLOCKED}ler.co.kr/admincenter/files/boad/4/manager.php However, as of this writing, the

%Application Data%\DigitalSites\UpdateProc . It reads the file %Application Data%\nvm.log . It requires parameters for execution. It deletes itself if the parameter is invalid. It may accesses the URL checkver.

website. Download Routine This Trojan downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the following parameter(s) passed on to it by its

{user name}\Local Settings\Temp on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Local\Temp on Windows Vista and 7.) It downloads a possibly malicious file from a certain URL. The URL

the created dllhost.exe It connects to the following URL to download file: http://{BLOCKED}.{BLOCKED}.72.223:8080/git/wiki.asp?id=519358d46ad51d9628cbe9059a502b67 http://{BLOCKED}.{BLOCKED

the following data: OS Version and Architecture Other Details This Trojan does the following: Connects to the following URL to download and load the payload on memory: sltp://setup.{BLOCKED

that connects to a malicious URL. NOTES: This malware checks if browser has the following details: name is Microsoft Internet Explorer version is MSIE 8 user agent is Windows NT 5.1 The URL it redirects

malware/grayware packages. Download Routine This malware saves the files it downloads using the following names: {malware path}\{random value} It downloads a possibly malicious file from a certain URL. The URL where

names: %TEMP%/{Random Numbers}.dll %TEMP%/{Random Numbers}.exe It downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the parameter passed

downloads using the following names: %TEMP%\{random value} It downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the parameter passed on to

URL. The URL where this malware downloads the said file depends on the parameter passed on to it by its components. Other Details This Trojan requires its main component to successfully perform its

URL. The URL where this malware downloads the said file depends on the parameter passed on to it by its components. Other Details This Trojan requires its main component to successfully perform its

website and run when a user accesses the said website. Download Routine This Trojan downloads a possibly malicious file from a certain URL. The URL where this malware downloads the said file depends on the

vulnerabilities. Arrival Details This Trojan may be hosted on a website and run when a user accesses the said website. Download Routine This Trojan downloads a possibly malicious file from a certain URL. The URL

address/domain}:{port} . The malware is encoded to Base64 for encryption then concatenated to URL and finally sent to the following URL: http://{BLOCKED}-uro.ru/get/index.php?record={encoded base64 stolen

CVE-2005-4360,ms07-041 The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to

Description Name: Possible FAKEAV - URL request . This is Trend Micro detection for packets passing through HTTP network protocols that manifests Callback activities which can be a potential intrusion. Below are some indicators of unusual behavior:Su...