Search
Keyword: andy1
registry entries: HKEY_LOCAL_MACHINE\SOFTWARE\ODBC\ {random key} ProcessId = "7d" HKEY_LOCAL_MACHINE\SOFTWARE\ODBC\ Brazos volatile counter VolatileDsnCount = "1" HKEY_LOCAL_MACHINE\SOFTWARE\ODBC\ Temporary
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and Folder
adds the following registry entries: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center UacDisableNotify = "1" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center\Svc AntiVirusOverride = "1
-m0 -hp"5c(ZP(Q$nGYX3V.u8-dR9-6w55h0o}5P" "%AppDataLocal%\Adobe\Acrobat\DC\1 \xd0\xa4\xd0\xb0\xd0\xb9\xd0\xbb \xd0\xb7\xd0\xb0\xd1\x88\xd0\xb8\xd1\x84\xd1\x80\xd0\xbe\xd0\xb2\xd0\xb0\xd0\xbd. \xd0\x9f
This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and Folder
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
" HKEY_CURRENT_USER\Software\Afqteuv W2_141 = "35b66474" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center UacDisableNotify = "1" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center\Svc AntiVirusOverride = "1
This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and Folder
\IPSec\ Policy\Local\ipsecFilter{18aaee4d-968c-481b-b78c-e5830d70614e} ipsecDataType = "1" HKEY_LOCAL_MACHINE\SOFTWARE\Policies\ Microsoft\Windows\IPSec\ Policy\Local\ipsecFilter
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It modifies files, disabling programs and applications
\Microsoft\ Security Center UacDisableNotify = "1" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center\Svc AntiVirusOverride = "1" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center\Svc
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\MiscStatus HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\MiscStatus\ 1 HKEY_LOCAL_MACHINE\SOFTWARE
\Classes\ Wow6432Node\CLSID\{916E6308-2C5D-4036-ABFE-DA0DB91B56A1}\ MiscStatus\1 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ Wow6432Node\CLSID\{916E6308-2C5D-4036-ABFE-DA0DB91B56A1}\ Control HKEY_LOCAL_MACHINE
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Ransomware arrives on a system
\Microsoft\ Security Center UacDisableNotify = "1" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center\Svc AntiVirusOverride = "1" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center\Svc
" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\SharedDlls %System%\Inetwh32.dll = "1" Dropping Routine This Trojan drops the following files: %User Temp%\ext3.tmp %User Temp%\pft7~tmp\pftw1.pkg %User
\ Plugins {entries} = "{values}" HKEY_CURRENT_USER\Software\a2zLyrics-1\ Plugins\1 Version = "{dword:0000000b}" HKEY_CURRENT_USER\Software\a2zLyrics-1\ Plugins\1 Name = "base" HKEY_CURRENT_USER\Software
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center\Svc HKEY_CURRENT_USER\Software\Yqshjvw It adds the following registry entries: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center UacDisableNotify = "1
\SOFTWARE\bntrp HKEY_CURRENT_USER\Software\Aasppapmmxkvs\ -993627007 It adds the following registry entries: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Security Center UacDisableNotify = 1 HKEY_LOCAL_MACHINE