Search
Keyword: unixliona1
" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows NT\CurrentVersion\Tracing\ Microsoft\BITS Active = 1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows NT\CurrentVersion\Tracing\ Microsoft\BITS ControlFlags = 1
This spyware attempts to steal sensitive online banking information, such as user names and passwords. This routine risks the exposure of the user's account information, which may then lead to the
\ Internet Account Manager\Accounts\Active Directory GC LDAP Server ID = "0" HKEY_CURRENT_USER\Software\Microsoft\ Internet Account Manager\Accounts\Bigfoot LDAP Server ID = "1" HKEY_CURRENT_USER\Software
Profile%\Templates\wordpfct.wpd = "68adfd" It modifies the following registry entries: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows NT\CurrentVersion\SystemRestore DisableSR = "1" Dropping Routine This
)_÷Mð_CHAR(0x0F)_eJ²_CHAR(0x03)_«â¦¡\_CHAR(0x04)_Õw_CHAR(0x13)_6 ê®ö¶(á'_CHAR(0x1B)_¶=C÷¨s1¢2vof4ª_CHAR(0x12)_/ø×}Ýîõ+Mõ¾U¾M·¦Ï[µ2ÕiÝjáñ_CHAR(0x03)_M_CHAR(0x0F)_=d(êk¼E´_CHAR(0x12)_Hèw_CHAR
\CurrentVersion\Uninstall\ UWSC Pro_is1 NoModify = "1" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Uninstall\ UWSC Pro_is1 NoRepair = "1" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
Modifications This Trojan adds the following registry entries as part of its installation routine: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Policies\ system DisableTaskMgr = 1 It changes the
\Session0000 Sequence = "1" HKEY_CURRENT_USER\Software\Microsoft\ RestartManager\Session0000 RegFiles0000 = "\x00" HKEY_CURRENT_USER\Software\Microsoft\ RestartManager\Session0000 RegFilesHash = "{random
This Worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Worm arrives on a system as a file
CVE-2009-1856 Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a
CASINONET is an adware which uses a gambling software to gather personal information, which can be used for marketing purpose. Known games for this application are Blackjack , Roulette , Online Slot
\ Windows NT\CurrentVersion\Winlogon SFCScan = "0" It modifies the following registry entries: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Explorer\ Advanced HideFileExt = "1" (Note: The
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
\ FirewallPolicy\StandardProfile DisableNotifications = "1" HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\ Services\SharedAccess\Parameters\ FirewallPolicy\StandardProfile\GloballyOpenPorts\ List 1588:UDP = "1588:UDP:
{B0C56FD7-493D-44DD-B007-BBB5117D6E6F}_is1 URLUpdateInfo = "http://www.PCPowerSpeed.com/" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Uninstall\ {B0C56FD7-493D-44DD-B007-BBB5117D6E6F}_is1 NoModify = "1
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
CASINONET is an adware which uses a gambling software to gather personal information, which can be used for marketing purpose. Known games for this application are Blackjack , Roulette , Online Slot
\Policies\ Microsoft\Windows NT\SystemRestore It adds the following registry entries: HKEY_CURRENT_USER\Software\Policies\ Microsoft\Windows\System DisableCMD = "1" HKEY_CURRENT_USER\Software\Microsoft
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a