Search
Keyword: usoj_tarodrop.am
following registry keys: HKEY_CURRENT_USER\Software\DC3_FEXEC It adds the following registry entries: HKEY_CURRENT_USER\Software\DC3_FEXEC 11/10/2014 at 3:14:41 AM = "
7.) It adds the following registry keys: HKEY_CURRENT_USER\Software\DC3_FEXEC It adds the following registry entries: HKEY_CURRENT_USER\Software\DC3_FEXEC 6/18/2014 at 7:16:17 AM = "
\svchost.exe,explorer.exe" HKEY_CURRENT_USER\Software\DC3_FEXEC 4/30/2015 at 12:07:50 AM = "{1c6961c0-f82d-11e0-a6bd-806d6172696f-1756172240}" HKEY_CURRENT_USER\Software\DC3_FEXEC 4/30/2015 at 12:07:57 AM = "
\svchost.exe,explorer.exe" HKEY_CURRENT_USER\Software\DC3_FEXEC 4/7/2015 at 5:47:30 AM = "{1c6961c0-f82d-11e0-a6bd-806d6172696f-1756172240}" HKEY_CURRENT_USER\Software\DC3_FEXEC 4/7/2015 at 5:47:41 AM = "
\Microsoft\ Windows NT\CurrentVersion\Winlogon shell = "%User Temp%\Windows\filename.exe,explorer.exe" HKEY_CURRENT_USER\Software\DC3_FEXEC 4/20/2015 at 2:23:07 AM = "
This Trojan Spy arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan Spy arrives on a system
HKEY_CURRENT_USER\Software\DC3_FEXEC 5/27/2014 at 7:24:53 AM = "{1c6961c0-f82d-11e0-a6bd-806d6172696f-1756172240}" HKEY_CURRENT_USER\Software\DC3_FEXEC 5/27/2014 at 7:25:03 AM = "
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It uses the Windows Task Scheduler to add a scheduled
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It modifies files, disabling programs and applications
\Ak\shell\ runas HKEY_CURRENT_USER\Ak\shell\ runas\command HKEY_CURRENT_USER\Am HKEY_CURRENT_USER\Am\DefaultIcon HKEY_CURRENT_USER\Am\shell HKEY_CURRENT_USER\Am\shell\ open HKEY_CURRENT_USER\Am\shell
\WU\shell\ runas HKEY_CURRENT_USER\WU\shell\ runas\command HKEY_CURRENT_USER\Am HKEY_CURRENT_USER\Am\DefaultIcon HKEY_CURRENT_USER\Am\shell HKEY_CURRENT_USER\Am\shell\ open HKEY_CURRENT_USER\Am\shell
This Trojan Spy arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan Spy arrives on a system
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This spyware arrives on a system as a
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and Folder
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and Folder
This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and Folder
This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Backdoor arrives on a system as a
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It modifies files, disabling programs and applications