Search
Keyword: elfrootkitc2
CVE-2003-0085 Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
This backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This backdoor arrives on a system as a
\Software\DownloadManager\ FoldersTree\Music ID = "2" HKEY_CURRENT_USER\Software\DownloadManager\ FoldersTree\Music mask = "mp3 wav wma mpa ram ra aac aif m4a" HKEY_CURRENT_USER\Software\DownloadManager
CVE-2008-5500 The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial
Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodule operations, which makes it easier for remote attackers
CVE-2010-0249 A remote code execution vulnerability exists in Microsoft Internet
Explorer. The vulnerability exists as an invalid pointer reference
within Internet Explorer. It is possible under
"hbbadcmbpgmbdlecggopiocgfbkcgona" HKEY_LOCAL_MACHINE\SOFTWARE\Policies\ Google\Chrome\ExtensionInstallWhitelist 2 = "hdpeaegihbnfellpdiiabeljgdpoalpl" HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ Wow6432Node\CLSID\
This Trojan Spy arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan Spy arrives on a system
This Potentially Unwanted Application arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It does not have any
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and Folder
\Javascripts\Desktop_2.ini %User Temp%\2$$.Ico %User Temp%\82$$.Ico %Program Files%\Adobe\Reader 10.0\Reader\Legal\Desktop_2.ini %Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\Desktop_2.ini %Program Files%
\Plus-HD-8.1\ Code AppJavaScript = "{random characters}" HKEY_CURRENT_USER\Software\Plus-HD-8.1\ Code BgJavaScript = "{random characters}" HKEY_CURRENT_USER\Software\Plus-HD-8.1\ Plugins\207 Version = "2
CVE-2008-5510 The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 ignores the '\0' escaped null character,
CVE-2008-5508 Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or
\ Windows\CurrentVersion\Explorer\ Advanced Hidden = "2" (Note: The default value data of the said registry entry is 2 .) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center AntiVirusOverride = "1
\Software\WinRAR\ Profiles\2 HKEY_CURRENT_USER\Software\WinRAR\ Profiles\3 HKEY_CURRENT_USER\Software\WinRAR\ Profiles\4 HKEY_CURRENT_USER\Software\WinRAR\ General HKEY_CURRENT_USER\Software\WinRAR\ Interface
\Adobe\Reader 10.0\Resource\CMap\Desktop_2.ini %User Temp%\32$$.Ico %Program Files%\Adobe\Reader 10.0\Resource\Font\Desktop_2.ini %User Temp%\2$$.Ico %Program Files%\Adobe\Reader 10.0\Reader\plug_ins
This Potentially Unwanted Application arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a