This Trojan downloads files from the Internet and launches them without the user’s knowledge or consent. It is a Windows PE EXE file. It is 35840 bytes in size. It is written in C++. Once launched, the Trojan will: extract the file... [More]

It exploits the vulnerability MS08-067 in the Windows Server Service in order to spread itself. It also spreads through shared and removable drives. It reduces considerably the protection level of the computer, modifies the security policies of the u... [More]

It reduces the security level of the computer: it notifies the attacker that the computer has been compromised and is ready to be used maliciously; it changes system permissions, decreasing the security level.... [More]

This is another copy of the Trojan.Downloader.Wimad.A . It behaves in a similar way and even downloads from the same webpage ( hxxp://missing-codecs.net ) which means that its authors have been exploiting it for a long time with no modifications of t... [More]

This is another copy of the Trojan.Downloader.Wimad.A . It behaves in a similar way and even downloads from the same webpage ( www.fastmp3player.com ) which means that its authors have been exploiting it for a long time with no modifications of the a... [More]

This is a disguised application under a common media file extension meant to trick the users into accessing different web pages. Because of the common misconception that malware or viruses are found only in executables, the user could be lead to trus... [More]

This is another copy of the Trojan.Downloader.WMA.Wimad . It behaves in a similar way and even downloads from the same webpage ( www.fastmp3player.com ) which means that its authors have been exploiting it for a long time with no modifications of the... [More]

When the malware starts it creates files in the following locations:%windir%\system32\debug.exe%windir%\system32\drivers\beep.sysrandom named files such as c:\000F443C\1000516 The file beep.sys is registered as a windows service; thefollowing ... [More]

- the trojan is a DLL which is dropped and loaded by another malware;- its only action is to download a trojan to %temp%\QQ_Update.cab which is heuristically detected by BitDefender as BehavesLike:Win32.ExplorerHijack;- after executing the new troja... [More]

Trojan.Downloader.3069.A is an adware related DLL. To install on the victim computer, it must be called from another application (such as adware). When called for the first time, it registers itself as a COM object by creating the following registry ... [More]