Backdoor:Win32/Rbot.AB
Worm:Win32/Sohanad.AB
Trojan:Win32/Alureon.gen!AB
Trojan:Win32/Alureon.gen!AB is the generic detection for a member of the Win32/Alureon family. It drops another malware, tries to delete the Hosts file, and tries to create a virtual file system (VFS). It may also connect to certain servers.
TrojanDownloader:Win32/Dofoil.AB
Microsoft Defender Antivirus detects and removes this threat.
This sophisticated downloader has been observed to download Trojan:Win32/Dofoil.AB and Trojan:Win32/CoinMiner.D in the wild. It injects its code and runs hidden in system programs to avoid detection.
On March 6, 2018, behavior monitoring and machine learning technologies in Microsoft Defender Antivirus stopped a Dofoil variant (also known as Smoke Loader) that tried to infect more than 400,000 computers. The massive campaign aimed to install a cryptocurrency miner that uses victim computers' resources for coin mining purposes. Learn how artificial intelligence stopped the attack within minutes:
Behavior monitoring combined with machine learning spoils a massive Dofoil coin mining campaign
Virus:Win32/Prolaco.AB
Virus:Win32/Expiro.AB
Virus:Win32/Expiro.AB is the detection for a virus that infects EXE files in all drives and collects user credentials from an infected computer. It also allows backdoor access and control to the infected computer, and lowers Internet Explorer settings.
Virus:Win64/Expiro.AB
Trojan:Win32/Tobfy.A is a ransomware that prevents you from accessing your desktop by covering the desktop with a certain image.
Backdoor:Win32/Berbew.AB
Backdoor:Win32/Gaobot.AB
Worm:Win32/Nuqel.AB
VirTool:Win32/DelfInject.gen!AB
Virus:Win32/Ramnit.AB
Virus:Win32/Ramnit.AB is the detection for files infected by variants of the Win32/Ramnit malware family. This malware drops and loads other malware, which may be detected as Trojan:Win32/Ramnit.gen!A.
Trojan:Win32/CoinMiner.AB
Microsoft Defender Antivirus detects and removes this threat.
This threat can perform a number of actions of a malicious hacker's choice on your PC.
Learn more about this type of threat: Invisible resource thieves: The increasing threat of cryptocurrency miners
VirTool:JS/Obfuscator.AB
Worm:Win32/Mydoom.AB@mm
Backdoor:Win32/Berbew.AB.dll
VirTool:Win32/VBInject.gen!AB
TrojanDownloader:Java/OpenConnection.AB
Trojan:Win64/Sirefef.AB
Trojan:Win64/Sirefef.AB is a component of the Sirefef multi-platform rootkit, related to Win32/Sirefef. Sirefef is multi-component malware family that modifies search results when you search for something on the Internet and generates pay-per-click advertising revenue for its controllers. This particular component clicks on links supplied by a remote attacker to generate revenue.