| Worm.Win32.AutoRun.bhx
This worm creates copies of itself on removable storage media. It is a Windows PE EXE file. It is 115760 bytes in size.
Installation
Once launched, the worm copies its executable file to the Windows system directory:
%System%\kavo.exe
In order to ensure that the worm is launched automatically...
Trojan-Dropper.Win32.Flystud.d
This Trojan is designed to install and launch other programs on the victim machine without the knowledge or consent of the user. It is a Windows PE EXE file. It is 328192 bytes in size. This Trojan is written in Visual Basic.
Trojan-Downloader.Win32.Small.dnk
This Trojan downloads files via the Internet without the user’s knowledge or consent. It is a Windows PE EXE file. It is 7488 bytes in size. It is packed using UPX. The unpacked file is approximately 30KB in size.
Backdoor.Win32.Cyanure
This Trojan provides a remote malicious user with access to the victim machine. It is a Windows PE EXE file. It is 22016 bytes in size.
Trojan-Downloader.VBS.Agent.ah
This malicious program is a Trojan. It is an HTML page which contains Visual Basic Script. It is 2076 bytes in size.
Trojan-Downloader.VBS.Psyme.ee
This Trojan downloads other files via the Internet and launches them for execution on the victim machine. The program is an HTML page which contains Visual Basic Script scenarios. It is 1301 bytes in size.
Trojan-Downloader.VBS.Psyme.ef
This Trojan downloads other files via the Internet and launches them for execution on the victim machine. The program is an HTML page which contains Visual Basic Script scenarios. It is 1775 bytes in size.
Trojan-Downloader.VBS.Psyme.ei
This Trojan downloads other files via the Internet and launches them for execution on the victim machine. It is an HTML page which contains Visual Basic Script and Java Script scenarios. It is 2022 bytes in size.
Trojan-Downloader.VBS.Psyme.eh
This Trojan downloads other files via the Internet and launches them for execution on the victim machine. It is an HTML page which contains Visual Basic Script and Java Script scenarios. It is 3398 bytes in size.
Worm.Win32.Autorun.cpe
This worm creates copies of itself on removable storage media. It is a Windows PE EXE file. It is 73728 bytes in size.
Installation
Once launched, the worm copies its executable file to the Windows system directory:
%System%\ssmicrco.scr
Propagation
The worm copies its executable file to all.. |