Search

file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Dropping Routine This Trojan drops the following files: %User Temp%\~!#1.tmp %User Temp%\~!#2.tmp

file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Dropping Routine This Trojan drops the following files: %User Temp%\~!#1.tmp %User Temp%\~!#4.tmp

file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Installation This Trojan adds the following processes: "%User Temp%

file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Dropping Routine This Trojan drops the following files: %User Temp%\~!#1.tmp %User Temp%\~!#2.tmp

or as a file downloaded unknowingly by users when visiting malicious sites. Installation This Trojan creates the following folders: %User Temp%\1.tmp (Note: %User Temp% is the current user's Temp

RwBlAHQALQBXAG0AaQBPAGIAagBlAGMAdAAgAFcAaQBuADMAMgBfAFMAaABhAGQAbwB3AGMAbwBwAHkAIAB8ACAARgBvAHIARQBhAGMAaAAtAE8AYgBqAGUAYwB0ACAAewAkAF8ALgBEAGUAbABlAHQAZQAoACkAOwB9AA== Other System Modifications This Trojan Spy modifies the following file(s): %System Root%\Python27\Lib\StringIO.py %System Root%\Python27\Lib\urlparse.pyc %System Root%\Python27\include\structseq.h

Internet Files%\CONTENT.IE5\2TPM8950\DESKTOP.INI %Temporary Internet Files%\CONTENT.IE5\4H9MXTT9\DESKTOP.INI %Temporary Internet Files%\CONTENT.IE5\SMCZPN4M\DESKTOP.INI %Temporary Internet Files%\CONTENT.IE5

\byjejor4.exe" "%Application Data%\vljbFDQFKCjA\8h17FGUP.exe" "%Application Data%\Microsoft\1olaxNII.exe" 2 "%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\VLJBFD~1\8h17FGUP.exe" > "%User Temp%

Root%\Documents and Settings\Documents and Settings.scr %User Profile%\Administrator.scr %User Profile%\Application Data\Application Data.scr %User Profile%\Identities\Identities.scr %User Profile%\

file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Dropping Routine This Trojan drops the following files: %User Temp%\~!#1.tmp %User Temp%\~!#2.tmp

file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Dropping Routine This Trojan drops the following files: %User Temp%\~!#1.tmp %User Temp%\~!#2.tmp

system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Dropping Routine This file infector drops the following files: %System%\magnify.ivr

file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Dropping Routine This Trojan drops the following files: %User Temp%\3.tmp %User Temp%\6.tmp %User

Application adds the following processes: %User Temp%\tmpD9F9.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART "%User Temp%\is-3ACMK.tmp\tmpD9F9.tmp" /SL5="$5015A,1963665,721408,%User Temp%\tmpD9F9.exe" /VERYSILENT

GoogeChromeAutoLaunch /f /d ""{malware file path and name}"" (Note: %System% is the Windows system folder, where it usually is C:\Windows\System32 on all Windows operating system versions.) It creates the following

worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Installation This worm creates the following folders: %Windows%

file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Dropping Routine This Trojan drops the following files: %User Temp%\~!#1.tmp %User Temp%\~!#2.tmp

dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Installation This worm drops the following copies of itself into the affected system: %System%

Other System Modifications This Trojan modifies the following file(s): %System Root%\AUTOEXEC.BAT %System Root%\boot.ini %System Root%\CONFIG.SYS %System Root%\IO.SYS %System Root%\MSDOS.SYS %System Root%

malicious sites. Installation This Trojan creates the following folders: %User Profile%\KIS\Log.DAT %User Profile%\KIS\User.DAT (Note: %User Profile% is the current user's profile folder, which is usually C: