Search
Keyword: usojan.ps1.killav.aa
Application adds the following processes: ping -n 1 -w 5000 www.piriform.com %System Root%\Program Files\CCleaner\CCleaner64.exe /createSkipUAC "%System Root%\Program Files\Internet Explorer\iexplore.exe
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
This Worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Worm arrives on a system as a file
This Worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Worm arrives on a system as a file
This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and Folder
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and Folder
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
Capable of performing Brute Force Attack. It uses the following credentials: Username: administrator Password: 123456 password PASSWORD football welcome 1 12 21 123 321 1234 12345 123123 123321 111111
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
" HKEY_LOCAL_MACHINE\SOFTWARE\Policies\ Microsoft\Windows\WindowsUpdate DisableOSUpgrade = "1" HKEY_LOCAL_MACHINE\SOFTWARE\Policies\ Microsoft\Windows\WindowsUpdate\ OSUpgrade ReservationsAllowed = "0
\FeatureControl\ FEATURE_BROWSER_EMULATION iexplore.exe = "22b8" HKEY_LOCAL_MACHINE\SOFTWARE\Policies\ Microsoft\Windows\WindowsUpdate DisableOSUpgrade = "1" HKEY_LOCAL_MACHINE\SOFTWARE\Policies\ Microsoft\Windows
credentials: Username Administrator Password !@#$%^&* 000000 1 1111 111111 111111111 112233 11223344 12 121212 123 123 123 123!@#qwe 123.com 123123123 123321 1234 12345 123456 123456 1234567 12345678
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and Folder
qwer12345 Huawei@123 123@abc golden 123!@#qwe 1qaz@WSX Ab123 1qaz!QAZ Admin123 Administrator Abc123 Admin@123 999999 Passw0rd 123qwe!@# football welcome 1 12 21 123 321 1234 12345 123123 123321 111111 654321
This Potentially Unwanted Application arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It may be manually installed
\PDF Architect 2 locale = en HKEY_CURRENT_USER\Software\PDF Architect 2\ Options\General Allow Automatic Updates = 1 HKEY_CURRENT_USER\Software\PDF Architect 2\ Installation Desktop Shortcut = %Desktop%
said registry entry is 3 .) HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Internet Settings\ Zones\3 2300 = "0" (Note: The default value data of the said registry entry is 1 .)
" HKEY_LOCAL_MACHINE\SOFTWARE\Policies\ Microsoft\Windows\WindowsUpdate DisableOSUpgrade = "1" HKEY_LOCAL_MACHINE\SOFTWARE\Policies\ Microsoft\Windows\WindowsUpdate\ OSUpgrade ReservationsAllowed = "0