Skip to main content
Skip to main content
Microsoft Security Intelligence
500 entries found. Displaying page 1 of 25.
Updated on Jan 27, 2005
Backdoor:Win32/Berbew.AD is a Trojan that installs silently on your computer. It can capture and send personal information to a Web site. It can also download files from Web sites and run them on your computer. There are no readily apparent indications that your computer is infected with this Trojan.
Alert level: severe
Updated on Jan 06, 2012

Exploit:JS/Blacole.AD is a malicious JavaScript that attempts to exploit several vulnerabilities in Adobe Acrobat and Reader. If the exploit is successful in compromising a vulnerable host, it could result in downloading and executing other malware. Exploit:JS/Blacole.AD is a component of an exploit kit that is distributed as the "Blackhole exploit pack".

Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Nuqel.AD is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new machines. Commonly, worms may spread directly by copying themselves to removable or network drives, or by attempting to exploit particular vulnerabilities on targeted machines. Worms also often attempt to spread via platforms that require user interaction in order to run. They may send themselves as an attachment to an email or an instant message, or send a link to a copy of themselves in the body of a message. In these cases the message needs to be convincing enough to encourage the victim to click on the link or attachment and run or download a copy of the worm.
Alert level: severe
Updated on May 23, 2011
VirTool:JS/Obfuscator are detections for programs that have had their purpose obfuscated to hinder analysis or detection by anti-virus scanners. They commonly employ a variety of techniques such as encryption.
Alert level: severe
Updated on Mar 03, 2005
Win32/Bagle.AD@mm is a minor variant of Win32/Bagle.AA@mm. It is a mass-mailing worm that targets computers running certain versions of Microsoft Windows. The worm sends itself as an attachment to e-mail addresses that it finds on the infected computer. It also spreads through file-sharing networks. The worm opens a backdoor and monitors a TCP port for instructions from remote attackers.
Alert level: severe
Updated on Apr 11, 2011
VirTool:Win32/VBInject.gen!AD is a generic detection for malicious files that are obfuscated using particular techniques to protect them from detection or analysis.
Alert level: severe
Updated on Apr 11, 2011
VirTool:Win32/VBInject.AD is a generic detection for malicious files that are obfuscated using particular techniques to protect them from detection or analysis.
Alert level: severe
Updated on Oct 26, 2011
Trojan:Win32/Qhosts.AD is a malicious program that is unable to spread of its own accord. It may perform a number of actions of an attacker's choice on an affected computer.
Alert level: severe
Updated on Mar 07, 2005
Win32/Mydoom.AD@mm is a mass-mailing worm that sends itself to e-mail addresses it finds on the infected computer. 
Alert level: severe
Updated on Apr 11, 2011
Trojan:VBS/Startpage.AD is a trojan that modifies the user's default start page.
Alert level: severe
Updated on Nov 20, 2017

Microsoft Defender Antivirus detects and removes this threat.

This threat is a member of the JS/TechBrolo family. It is JavaScript malware that is hosted on malicious sites. When you access these sites, this threat displays succeeding fake alerts that falsely imply you that your computer is infected by malware or has system errors. The fake alerts tell you that in order to fix the "problem", you need to call a technical support number. You may be charged by the technical support. 

Our tech support scams FAQ page has more information on this type of threat.

You can also read the following blog entries to know more about the latest tech support scam attacks, techniques, and trends:

Alert level: severe
Updated on Mar 16, 2018

Microsoft Defender Antivirus detects and removes this threat.

This threat can perform a number of actions of a malicious hacker's choice on your PC.

Learn more about this type of threat: Invisible resource thieves: The increasing threat of cryptocurrency miners

Alert level: severe
Updated on Aug 05, 2011
PWS:Win32/Zbot.gen!AD is a password stealer and remote access trojan.
Alert level: severe
Updated on Sep 14, 2011

Virus:Win32/Ramnit.AD is a detection for files infected by variants of the Win32/Ramnit malware family. This malware drops and loads other malware, which may be detected as Trojan:Win32/Ramnit.D.

Alert level: severe
Updated on Sep 02, 2013

Trojan:Win64/Sirefef.AD is a component of Win64/Sirefef - a multi-component family of malware that moderates your Internet experience by changing search results and generating pay-per-click advertising revenue for its controllers. The family consists of multiple parts that perform different functions, such as downloading updates and additional components, hiding existing components, or performing a payload.

Alert level: severe
Updated on Nov 01, 2007
Trojan:JS/Psyme.AD exploits publicly published vulnerabilities via the Web browser Internet Explorer to execute malicious JavaScript. This malicious JavaScript is commonly used to download and execute other malware onto the system. 
Alert level: severe
Updated on Oct 26, 2011
VirTool:Win32/CeeInject.AD is a generic detection for malicious files that are obfuscated using particular techniques to protect them from detection or analysis.
Alert level: severe
Updated on Apr 11, 2011
TrojanDownloader:Win32/Small.gen!AD is a program that silently downloads and executes arbitrary files without the affected user’s consent. Installation details and the files downloaded and executed may vary from instance to instance of this detection.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Slenping.AD is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Commonly, worms may spread directly by copying themselves to removable or network drives, or by attempting to exploit particular vulnerabilities on targeted computers. Worms also often attempt to spread via platforms that require user interaction in order to run. They may send themselves as an attachment to an email or an instant message, or send a link to a copy of themselves in the body of a message. In these cases the message needs to be convincing enough to encourage the victim to click on the link or attachment and run or download a copy of the worm.
Alert level: severe
Updated on Jul 02, 2012

Backdoor:Win32/Zegost.AD is malware that drops a backdoor trojan in your computer. The backdoor trojan is detected as Backdoor:Win32/Zegost.X.

Alert level: severe