The script is a javascript piece of code that gets injected in every html file viewed by the infected user. The presence of the script is usually accompanied by Trojan.Vundo.FKW or Trojan.Vundo.FCB although other versions can be also responsable. Vun... [More]

This malware warns you about fake infections in your computer and requests a scan with a rogue antivirus ["AntiSpywareMaster" / "TrustedAntivirus" / "PCVirusless" / "SpyGuardPro"].Then it downloads an installer from the products website.It in... [More]

You might remember the recent Trojan.Exploit.SSX , where a mechanism of infection trough exploits was described.This threat acts the same as the mentioned one, except it tries to avoid detection by AV companies by adding an extra packer over its code... [More]

The malware javascript has an invisible iframe which leads to Trojan.Exploit.ANNZ, that has malicious actions - downloads a backdoor (Backdoor.Generic.76302).... [More]

It downloads a code which will try to exploit a vulnerability of the SFWObject ActiveX Control add-on that runs in Explorer or Mozilla. The SWFObject is used to access Flash media content. System can be infected during visits on malicious sites hosti... [More]

Its a Javascript that use some common algorithms (escape, base64) for encoding its body to avoid detection. A VBScript ishidden under this algoritm. The VBStript is also obfuscated, contains a link: "http://ad.ote2008.[removed]/ad.css" to a file de... [More]

After decrypting the javascript code, its easy to notice that the malware consists of two vulnerabilities: CVE-2008-1309 that tries to exploit a flaw in Real Player in handling of its "Console" property which leads to memory corruption and thus giv... [More]

The trojan acts as a security menace that makes the system unsafer for surfing the Internet.It has the folowing behavior :First it makes a check for the targeted security settings using PrivacyGetZonePreferenceW function . This will access values of ... [More]

This Trojan is a Windows PE EXE file, 14655 bytes in size. Other modifications of this Trojan may have a slightly different size. The Trojan is written in C and packed using FSG. The unpacked file is approximately 65KB in size.The program is desig... [More]

This Trojan is a Windows PE EXE file 40448 bytes in size.InstallationOnce launched, the Trojan creates the following files in the Windows system and root directories:%System%\intell32.exe %System%\oleext.dll %System%\oleext32.dll %System%\wppp.h... [More]