Normal0falsefalsefalseMicrosoftInternetExplorer4st1\:*{behavior:url(#ieooui) }/* Style Definitions */table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-parent:... [More]

The malware drops the following files:1) %windir%\system32\hbqqxx.dll- this .dll will be injected in all the running processes and it will try to steal sensitive information, such as user accounts and passwords for the Tencent QQ instant messaging ... [More]

This malware is used to steal user information from online games as qqlogin.exe hx2game.exe and others. The dll file will be injected in every running process. If you run one of the mentioned games it will send user data to a chinese server.The malwa... [More]

First of all, the malware deletes the copies of%windir%system32\rpcss.dll (a Windows file) from%windir%\system32\dllcache\rpcss.dlland%windir%\servicepackfiles\i386\rpcss.dll in order to avoid the possibility of the operating system to restore... [More]

When launched, the trojan drops in %windir%\system32 folder a DLL file having the name derived form an existing DLL from same folder (e.g. rasmanqn3.dll, mdimapzx.dll); a file with the same name but different extension is also dropped (rasmanqn3.nls... [More]

This trojan is intended to steal passwords from online games. Once it is executed, a .dll file will be dropped in %SYSTEM% directory. That .dll file actually does all the job.On a new system restart, the dll will be injected in every running process.... [More]

The trojan drops 3 files in %SystemDir%\\..\\temp or in %CommonFilesDir%\\Microsoft Shared\\Web Folders, named IBM.exe, IBM.dll and IBM.dll (Eg. IBM00001.exe, IBM00001.dll, IBM00002.dll).It then tries to execute the dropped executa... [More]

The virus is initialy an executable file, when is launched does following:copies itself to %SYSTEM%\[virus_name].exe (e.g. ckvo.exe)drop %SYSTEM%\[virus_name][N].exe (e.g. ckvo1.dll) - which is used to monitorsactions inside games executables(keyst... [More]

This Trojan is designed to steal confidential data.This worm is a Windows PE EXE file.It is 569,344 bytes in size. It is not packed in any way.It is written in Delphi. Installation When launched, the Trojan creates the following files in its working... [More]

This program belongs to the family of passwords stealing trojans. It was spread from a public access Web page on the narod.ru server in the beginning on June 2002.The web page contained the following:Intermediate ExaminationsTest papers for mathemati... [More]