Search

This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and Folder

This Trojan opens non-malicious .PDF files for users not to suspect any malicious activity in the system. This Trojan arrives as an attachment to email messages spammed by other malware/grayware or

This is related to a spam run targeting participants of the 2011 Annual Meeting of the New Champions at the World Economic Forum. The attachments in the spammed messages drop this malicious file. To

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a

" Dropping Routine This Ransomware drops the following files: %System Root%\Program Files\DVD Maker\Shared\DissolveNoise.png %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png

%\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf %System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_SelectionSubpicture.png %System Root%\Program

said registry entry is 3a98 .) Dropping Routine This Ransomware drops the following files: %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_SelectionSubpicture.png

Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterRegular.ttf %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Mask1.png %System Root%\Program Files\Java\jre1.8.0_144\lib

Ransomware drops the following files: %System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search\pairs\pair12.js.Contact_Data_Recovery.txt %System Root%\Program Files\DVD Maker\Shared\DvdStyles

\long_exposure.jpg %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\mainscroll.png %System Root%\Program Files\Mozilla Firefox\updated\api-ms-win-core-sysinfo-l1-1-0.dll %System Root%\Program

\js\library.js %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion

Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_ButtonGraphic.png %System Root%\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images

This Potentially Unwanted Application arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This

name}.tmp" /SL5="$300AA,2898274,57856,{malware file path and name}" "%Program Files%\Aurora DVD Copy\Aurora_DVD_Copy.exe" "%System%\cmd.exe" /C ping 127.0.0.1 /n 300 & "%Program Files%\Aurora DVD Copy

name}.tmp" /SL5="$30024,2822616,57856,{malware file path and name}" "%Program Files%\Aurora DVD Copy\Aurora_DVD_Copy.exe" "%System%\cmd.exe" /C ping 127.0.0.1 /n 300 & "%Program Files%\Aurora DVD Copy

\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17843_none_e4173b3db6ff6300 %Windows%\winsxs\amd64_microsoft-windows-t..lservices-workspace_31bf3856ad364e35_6.1.7601.17514_none_2f1505d970be5493 %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports %Windows%\winsxs

\DOCUME~1\ADMINI~1 %User Profile%\LOCALS~1 %User Temp%\nsj3.tmp %User Temp%\nsc6.tmp %Program Files%\DVD Decrypter %Program Files%\DVD Decrypter\Sounds %Start Menu%\Programs\DVD Decrypter (Note: %System Root%

\add-account\images\icons.png %Program Files%\Adobe\acrobat reader dc\Reader\webresources\resource0\static\js\plugins\home\js\nls\nb-no\ui-strings.js %System Root%\program files\dvd maker\Shared\dvdstyles

%System Root%\program files\kazaa\my shared folder\Error Doctor 2008.exe %System Root%\program files\kazaa\my shared folder\Acker DVD Ripper 2008.exe %System Root%\program files\kazaa\my shared folder\Mirc

\program files\kazaa\my shared folder\Error Doctor 2008.exe %System Root%\program files\kazaa\my shared folder\Acker DVD Ripper 2008.exe %System Root%\program files\kazaa\my shared folder\Mirc Keygen.exe