Trojan.Downloader.JS.JH it is an obfuscated JavaScript.Files containing it are served from different websites, so they are probably created by a malware kit.The scripts "payload" differ from case to case (iframe injections, different exploits, etc.... [More]

The malware spreads through links in unsolicited/spam e-mail messages, where the user is tricked that he will see explicit videos with celebrities like Angelina Jolie. When clicking the link, the malware will be downloaded and run on the computer.Onc... [More]

This is an disguised application meant to trick the user to download and execute a malware. Usually it states the false incapacity of your software configuration to view this kind of media. Due to the common misconception that malware or viruses areo... [More]

This is an disguised application under a common media file extension meant to trick the user to download and execute a malware. Usually it states the false incapacity of your software configuration to view this kind of media. Due to the common miscon... [More]

When is executed, the virus waits 5 minutes and then tries to find an existing Internet Explorer process. If it doesnt exist, it creates one and injects itself into Internet Explorer process, creating there a new thread which tries to download a file... [More]

When the file is first executed, it creates a copy of itself in %windier%\system32 with a random name. This copy is scheduled to run at each fixed hour via "Scheduled Tasks". The original file is then deleted.In order to hide itself, it injects it... [More]

This trojan is written in JavaScript and it exploits a buffer overflow vulnerability of BaoFeng Storm ActiveX Control ( identified with the following CLSID: 6BE52E1D-E586-474F-A6E2-1A85A9B4D9FB). This is done by passing a long argument into rawParse(... [More]

This is an disguised application under a common media file extension meant to trick the user to download and execute a malware. Usually it states the false incapacity of your software configuration to view this kind of media. Due to the common miscon... [More]

When executed, the malware copies original (clean) file %sysdir%/userinit.exe into %sysdir%/userini.exe.It disables System File Protection, and overwrites %sysdir%/userinit.exe with a copy of itself, in order to be executed on every system start-up.A... [More]

This is an a small HTML file, possible sent by spam email. It tricks users into downloading a file called fireworks.exe hidden behind a fake embedded video related to the 4th of July holiday. Along with this video in the social engineering process th... [More]