Search
Keyword: html_ramnit.den
This is the Trend Micro detection for malicious HTML files that contain a malicious JavaScript. Once a user opens the malicious attachment, this malware connects to a certain website to download
This malicious script is noteworthy due to its use in what looks like a targeted attack via Webmail. To get a one-glance comprehensive view of the behavior of this Trojan, refer to the Threat Diagram
This spyware executes when a user accesses certain websites where it is hosted. Arrival Details This spyware executes when a user accesses certain websites where it is hosted. Stolen Information This
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This Trojan may be hosted on a website and run when a user accesses the said website. It inserts an IFRAME tag that redirects users to certain URLs. Arrival Details This Trojan may be hosted on a
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It is a component of other malware. It requires its main
This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It arrives via removable drives. It drops an AUTORUN.INF file to automatically execute the
\PROTOCOLS\Filter\ text/html (Default) = "Microsoft Improved HTML MIME Filter" HKEY_CLASSES_ROOT\PROTOCOLS\Filter\ text/html CLSID = "{random CLSID}" HKEY_CLASSES_ROOT\CLSID\{random CLSID}\ InProcServer32
This Trojan may be hosted on a website and run when a user accesses the said website. Arrival Details This Trojan may be hosted on a website and run when a user accesses the said website. Other
This Trojan may be hosted on a website and run when a user accesses the said website. It downloads a file from a certain URL then renames it before storing it in the affected system. It executes the
This Trojan displays fake alerts that may trick the user into downloading more malicious files onto the affected system or reveal confidential information that could be sent to malicious users and
This Trojan may be downloaded from remote sites. Once a user visits any of the aforementioned sites, this malware may download and load a malicious file detected as SWF_EXPLOIT.JE. This Trojan may be
This malware redirects users to adult/pornography sites. This Trojan may be hosted on a website and run when a user accesses the said website. Arrival Details This Trojan may be hosted on a website
This malware directs browsers to porn sites. This Trojan may be hosted on a website and run when a user accesses the said website. Arrival Details This Trojan may be hosted on a website and run when
This Trojan may be dropped by other malware. It may be unknowingly downloaded by a user while visiting malicious websites. It executes when a user accesses certain websites where it is hosted.
This Trojan may be hosted on a website and run when a user accesses the said website. However, as of this writing, the said sites are inaccessible. Arrival Details This Trojan may be hosted on a
This Trojan may be hosted on a website and run when a user accesses the said website. It inserts an IFRAME tag that redirects users to certain URLs. Arrival Details This Trojan may be hosted on a
Web page, this HTML script launches a hidden IFRAME that connects to a malicious URL. It redirects browsers to certain sites. However, as of this writing, the said sites are inaccessible. Arrival
This malware is loaded by HTML_EXPDROP.II. It attempts to connect to a site to download a backdoor detected as BKDR_POISON.BMN. The backdoor is executed on the affected computer. As a result, all
This Trojan may be hosted on a website and run when a user accesses the said website. Arrival Details This Trojan may be hosted on a website and run when a user accesses the said website.