Search
Keyword: id
\Microsoft\ DirectInput\MostRecentApplication Id = "{malware file name}501792d200023000" HKEY_CURRENT_USER\Software\Microsoft\ DirectInput\MostRecentApplication MostRecentStart = "{random values}" This report
\ DirectDraw\MostRecentApplication ID = "4117b81" (Note: The default value data of the said registry entry is 41107b81 .) This report is generated via an automated analysis system. Generic.dx (McAfee);
\Microsoft\ DirectInput\MostRecentApplication Id = "{malware file name}51aeb8f500021c00" HKEY_CURRENT_USER\Software\Microsoft\ DirectInput\MostRecentApplication MostRecentStart = "{random values}" This report
\Software\Microsoft\ DirectInput\MostRecentApplication Id = "{malware file name}5072658800019000" HKEY_CURRENT_USER\Software\Microsoft\ DirectInput\MostRecentApplication MostRecentStart = "{random values}
\ DirectDraw\MostRecentApplication ID = "57ea57" (Note: The default value data of the said registry entry is 41107b81 .) This report is generated via an automated analysis system. Program:Win32/Pameseg.BX
(Note: The default value data of the said registry entry is iexplore.exe .) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ DirectDraw\MostRecentApplication ID = "5163a49" (Note: The default value data of the said
{malware file name}" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ DirectDraw\MostRecentApplication ID = 2a425e19 This report is generated via an automated analysis system. Backdoor:Win32/Hupigon.WZ (Microsoft);
\ DirectDraw\MostRecentApplication ID = "2a425e19" (Note: The default value data of the said registry entry is 41107b81 .) This report is generated via an automated analysis system. PWS:Win32/Prast!rts
\Software\VB and VBA Program Settings\ SrvID\ID Dropping Routine This Trojan drops the following files: %System Root%\data.dat (Note: %System Root% is the root folder, which is usually C:\. It is also where
\ DirectDraw\MostRecentApplication ID = "4b7be4c" (Note: The default value data of the said registry entry is "41107b3f" .) This report is generated via an automated analysis system. Trojan:Win32/Orsam!rts
\ DirectDraw\MostRecentApplication ID = "4117b81" (Note: The default value data of the said registry entry is 41107b81 .) This report is generated via an automated analysis system. Trojan:Win32/Orsam!rts
\SOFTWARE\Microsoft\ DirectDraw\MostRecentApplication Name = "iexplore.exe" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ DirectDraw\MostRecentApplication ID = 4117b81 Other Details This Trojan connects to the
\ DirectDraw\MostRecentApplication ID = "4117b81" (Note: The default value data of the said registry entry is 41107b81 .) This report is generated via an automated analysis system. Trojan:Win32/Sisproc
\ DirectDraw\MostRecentApplication ID = "4ef22de" (Note: The default value data of the said registry entry is 41107b81 .) This report is generated via an automated analysis system. Trojan:Win32/Danginex
\ DirectDraw\MostRecentApplication ID = "4f6252d" (Note: The default value data of the said registry entry is 41107b81 .) This report is generated via an automated analysis system. Trojan:Win32/Danginex
\ DirectDraw\MostRecentApplication ID = "4117b81" (Note: The default value data of the said registry entry is 41107b81 .) This report is generated via an automated analysis system. TrojanClicker:Win32/Zirit.Y
\ DirectDraw\MostRecentApplication ID = "4f451cdc" (Note: The default value data of the said registry entry is 41107b81 .) This report is generated via an automated analysis system. PWS:Win32/Facepass.A
\ DirectDraw\MostRecentApplication ID = "2a425e19" (Note: The default value data of the said registry entry is 41107b81 .) This report is generated via an automated analysis system. TrojanSpy:Win32/Banker
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Setup id = 52249429074008443688429990326822 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Setup host = 91.212.127.147
\ DirectDraw\MostRecentApplication ID = "56e5de" (Note: The default value data of the said registry entry is 41107b81 .) This report is generated via an automated analysis system. Program:Win32/Pameseg.BX