The kido worm family creates files autorun.inf and RECYCLED{SID<....>}RANDOM_NAME.vmx on removable drives (sometimes on public network shares) Net-Worm.Win32.kido.ir is a windows startup script (AUTORUN.INF file). The size of the file is bet... [More]

MS10-061 is not categorized as virus, worm, Trojan or backdoor. It is a critical vulnerability in the Windows Print Spooler service on Windows 2008/7/Vista/2003/XP computers, which allows arbitrary code to be remotely execu... [More]

MS10-062 is not categorized as virus, worm, Trojan or backdoor. It is a critical vulnerability in MPEG-4 codec on Windows 2008/vISTA/2003/XP computers, which allows arbitrary code to be remotely executed in the vulnerable computer. There is ... [More]

MS10-063 is not categorized as virus, worm, Trojan or backdoor. It is a critical vulnerability in the Unicode Script Processor on Windows 2008/Vista/2003/XP computers and on Office 2007/2003/XP, which allows arbitrary code to be... [More]

Additionally, it has backdoor characteristics, as it attempts to connect to an IRC channel in order to receive instructions from its creator, such as downloading files or launching denial of service attacks, among others.... [More]

The detected websitehosting malware can be found on the Internet on different domains, but the mechanism is always the same : display false adverts in order to trick the user into downloading and installing another malware which is a rogue antivirus ... [More]

The Adware.NaviPromo malware family is an advanced and difficult-to-detect adware that runs silently on the infected computer. It uses rootkit techniques to hide its files on disk and memory. It also hides its registry entries.This malware comes bund... [More]

The detected websitehosting malware can be found on the Internet on different domains, but the mechanism is always the same : display false adverts in order to trick the user into downloading and installing another malware which is a rogue antivirus ... [More]

The detected websitehosting malware can be found on the Internet on different domains, but the mechanism is always the same : display false adverts in order to trick the user into downloading and installing another malware which is a rogue antivirus ... [More]

SQL.Spida.b is a new version of the worm SQL.Spida.a.Unlike the previous variant, SQL.Spida.b became quite widespread especially in Far Eastern Asian countries.When comparing "b" to "a", "b" was improved not to use the sqlpoke clone, and inste... [More]