Search

folders: %User Profile%\Macromedia\Flash Player (Note: %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003, or C:

Profile%\Application Data\Kiys %User Profile%\Microsoft\Address Book (Note: %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP,

Profile%\Application Data\Moiv %User Profile%\Microsoft\Address Book (Note: %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP,

%User Profile%\Macromedia\Flash Player (Note: %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003, or C:\Users\

folders: %User Profile%\Macromedia\Flash Player (Note: %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003, or C:

user's Temp folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000(32-bit), XP, and Server 2003(32-bit), or C:\Users\{user name}\AppData\Local\Temp on Windows

downloaded unknowingly by users when visiting malicious sites. Installation This worm drops the following copies of itself into the affected system: %System%\AdobeAQM.exe (Note: %System% is the Windows system

deletes the following folders: %User Profile%\Macromedia\Flash Player (Note: %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP,

folders: %User Profile%\Macromedia\Flash Player (Note: %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003, or C:

HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run Maytq = "%User Profile%\Ofveok\maytq.exe" Other System Modifications This spyware deletes the following folders: %User Profile%\Macromedia\Flash Player

following folders: %User Profile%\Macromedia\Flash Player (Note: %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP, and Server

folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003, or C:\Users\{user name} on Windows Vista and 7.. %User Temp% is the current user's Temp folder, which is

Player (Note: %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003, or C:\Users\{user name} on Windows Vista and

This Worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Worm arrives on a system as a file

\amd64_microsoft-windows-i..onal-codepage-28594_31bf3856ad364e35_6.1.7600.16385_none_b172e054fdc6b179.exe %Windows%\winsxs\msil_taskscheduler_31bf3856ad364e35_6.1.7601.17514_none_170487c39d98ec89\msil_taskscheduler_31bf3856ad364e35_6.1.7601.17514_none_170487c39d98ec89.exe %Program Files%\Windows Photo

Dropping Routine This Trojan drops the following files: %System Root%\Documents and Settings\All Users\Start Menu\Programs\Windows Managing System.lnk %User Profile%\Application Data\Macromedia\Flash Player

during the holidays. For more information on similar threats, take a look at our e-book, "Spam, Scams, and Other Social Media Threats." Trend Micro researchers also warn users of letters supposedly from

Detective.lnk %User Profile%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#local\settings.sol %Desktop%\Windows Trojans Sleuth.lnk %Start Menu%\Programs\Windows Trojans

XP Media Center Keygen.exe Windows XP Validator Crack.exe Wireshark.exe Xilisoft 3GP Video Converter v5 1 26 1231 Key.exe Xilisoft AVI MPEG Converter v5 1 26 1030 Keyg.exe Xilisoft AVI MPEG Joiner v1 0

Root%\Documents and Settings\All Users\Start Menu\Programs\Windows Debug Center.lnk %User Profile%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#local\settings.sol