Skip to main content
Skip to main content
Microsoft Security Intelligence
500 entries found. Displaying page 1 of 25.
Updated on Apr 11, 2011
Worm:Win32/Hamweq.AB is a worm that spreads via removable drives, such as USB memory sticks. It contains an IRC-based backdoor, which may be used by a remote attacker to order the affected machine to participate in Distributed Denial of Service attacks, or to download and execute arbitrary files.
Alert level: severe
Updated on Jan 24, 2017

Microsoft security software detects and removes this threat.

This threat uses vulnerabilities in recent versions of Internet ExplorerMicrosoft Silverlight, Adobe Flash Player, and Java to install malware on your PC.

To learn more about how this threat is being used by cybercriminals,

Read: Exploit kits remain a cybercrime staple against outdated software – 2016 threat landscape review series

Find out ways that malware can get on your PC.  

Alert level: severe
Updated on Jun 29, 2005
This software threat is detected and removed by the Malicious Software Removal Tool. For more information, see the parent variant.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Sohanad.AB is a member of Win32/Sohanad - a family of worms that may spread via removable or network drives and particular messenger applications. It may also modify a number of system settings to facilitate its actions on an affected computer, and contact a remote host.
Alert level: severe
Updated on Jun 08, 2011

Trojan:Win32/Alureon.gen!AB is the generic detection for a member of the Win32/Alureon family. It drops another malware, tries to delete the Hosts file, and tries to create a virtual file system (VFS). It may also connect to certain servers.

Alert level: severe
Updated on May 23, 2011
VirTool:Win32/DelfInject.gen!AB is a generic detection for malicious files that are obfuscated using particular techniques to protect them from detection or analysis.
Alert level: severe
Updated on Apr 11, 2011
Exploit:JS/Mult.AB is detection for JavaScript that runs multiple vulnerability exploitations in order to download, execute or otherwise run arbitrary code. The malicious JavaScript may be hosted on compromised Web sites.
Alert level: severe
Updated on Nov 18, 2013

Microsoft security software detects and removes this threat.

This family of malware uses stealth to hide itself. Trojans in this family can do different things, including:

  • Downloading and running other files
  • Contacting remote hosts
  • Disabling security features

Members of the family can also change search results, which can generate money for the attackers who use Sirefef.

Variants of Win32/Sirefef may be installed by other malware, including variants of the Trojan:Win32/Necurs family.

See the Win32/Sirefef family description for more information.

Alert level: severe
Updated on Apr 11, 2011
TrojanDownloader:ASX/Wimad is a detection for malicious Windows media files that are used in order to encourage users to download and execute arbitrary files on an affected machine. When opened with Windows Media Player, these malicious files open a particular URL in a web browser. 
Alert level: severe
Updated on Apr 11, 2011
TrojanSpy:Win32/Ursnif.AB is a trojan that steals sensitive information from an affected machine.
Alert level: severe
Updated on Nov 20, 2017

Microsoft Defender Antivirus detects and removes this threat.

This threat is a member of the JS/TechBrolo family. It is JavaScript malware that is hosted on malicious sites. When you access these sites, this threat displays succeeding fake alerts that falsely imply you that your computer is infected by malware or has system errors. The fake alerts tell you that in order to fix the "problem", you need to call a technical support number. You may be charged by the technical support. 

Our tech support scams FAQ page has more information on this type of threat.

You can also read the following blog entries to know more about the latest tech support scam attacks, techniques, and trends:

 

Alert level: severe
Updated on Apr 30, 2008
This dynamic-link library (DLL) file is dropped by variants of Backdoor:Win32/Berbew. See the parent variant list for more information.
Alert level: severe
Updated on Sep 04, 2013

Trojan:Win64/Sirefef.AB is a component of the Sirefef multi-platform rootkit, related to Win32/Sirefef. Sirefef is multi-component malware family that modifies search results when you search for something on the Internet and generates pay-per-click advertising revenue for its controllers. This particular component clicks on links supplied by a remote attacker to generate revenue.

Alert level: severe
Updated on Apr 11, 2011
VirTool:Win32/VBInject.gen!AB is a generic detection for malicious files that are obfuscated using particular techniques to protect them from detection or analysis.
Alert level: severe
Updated on Apr 11, 2011
TrojanDownloader:Java/OpenConnection.AB is a trojan Java applet that could allow the downloading and execution of arbitrary malicious files.
Alert level: severe
Updated on Jan 10, 2005
Win32/Mydoom.AB@mm is a mass-mailing worm that sends itself to e-mail addresses it finds on the infected computer.
Alert level: severe
Updated on Oct 14, 2015

Windows Defender detects and removes this threat.

This threat is part of the Win32/Banload family. Trojans in this family can download other malware onto your PC, including Win32/Banker and Win32/Bancos.

They can also steal your banking user names and passwords and send them to a remote attacker.

Find out ways that malware can get on your PC.

Alert level: severe
Updated on Aug 15, 2013

Windows Defender detects and removes this threat.

Trojan:DOS/Alureon.AB is a part of Win32/Alureon - a family of data-stealing malware. Alureon steals confidential information from your computer, such as user names, passwords, and credit card data. Win32/Alureon may also allow an attacker to transmit malicious data to your computer.

This particular variant infects the Master Boot Record (MBR).

Alert level: severe
Updated on Oct 20, 2011
TrojanDownloader:Win32/Bredolab.AB is a trojan that connects to a remote server to download and execute additional files.
Alert level: severe
Updated on Feb 19, 2017

Microsoft Defender Antivirus detects and removes this threat.

This threat downloads and installs other programs, including other malware, onto your PC without your consent.

Find out ways that malware can get on your PC.

Alert level: severe