This Trojan uses social engineering methods to lure users into performing certain actions that may, directly or indirectly, cause malicious routines to be performed. Specifically, it conceals itself as a legitimate wallpaper application. To get a... [More]

The rootkit copies its executable file as: %System%driversmrxcls.sys In order to ensure that it is launched automatically when the system is rebooted, the rootkit creates the following service registry key: [HKEY_LOCAL_MACHINESYSTEMCurrentControl... [More]

The rootkit copies its executable file as: %System%driversmrxnet.sys To ensure that it is launched automatically when the system is rebooted, the rootkit creates the following service registry key: [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServ... [More]

NSChanger.ALZ is a Trojan designed to modify the domain name system (DNS) to redirect users to false websites. This way, when users access certain websites, they are redirected to a false website, designed with malicious intentions, like for examp... [More]

Ransom.AB is a Trojan designed to blackmail users, as it causes the computer to be blocked and asks $12 for some software to unblock the system. When it is run, it displays on screen an email message in Russian (in case users have the OS... [More]

This Trojan launches a proxy server on the victim machine without the user's knowledge or consent. This makes it possible for a remote malicious user to appear as though his actions are being carried out on the infected machine.The Trojan is a Wind... [More]

This Trojan program turns the victim machine into a proxy server.It is a Windows PE EXE file.It is 57,344 bytes in size. Payload... [More]

This Trojan program enables a remote malicious user to use the victim machine as a proxy server. Consquently, the malicious user's activity will appear to be coming from the victim machine.It is a Windows PE EXE file.The file is 43,008 bytes in siz... [More]

This Trojan launches a proxy mail server on the victim machine.This Trojan is a Windows PE EXE file.The file is 239,616 bytes in size. Installation When launched, the Trojan copies its executable file to the Windows root directory: %WinDir%\service... [More]

This Trojan program is a Windows PE EXE file.It is 23,552 bytes in size. It is packed using UPX.The unpacked file is approximately 48KB in size.It is written in C. Payload... [More]