Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
818 entries found. Displaying page 27 of 41.
Updated on Dec 08, 2006
Alert level: severe
Updated on Dec 08, 2006
Alert level: severe
Updated on Dec 08, 2006
Alert level: severe
Updated on Dec 08, 2006
Alert level: severe
Updated on Dec 08, 2006
Alert level: severe
Updated on Dec 08, 2006
Alert level: severe
Updated on Dec 08, 2006
Alert level: severe
Updated on Jan 18, 2008
TrojanDownloader:Win32/Zlob.gen!L is a generic detection of a component of the greater Win32/Zlob malware family. Win32/Zlob refers to a large multi-component family of malware that modifies Internet Explorer's settings, alters and redirects the user's default Internet search page and home page, and attempts to download and execute arbitrary files (including additional malicious software).
 
The Win32/Zlob family has also been associated with rogue security programs that display misleading warnings regarding bogus malware infections.
Alert level: severe
Updated on Oct 07, 2008
BrowserModifier:Win32/Pointfree is a browser modifier that redirects users when invalid web site addresses or search terms are entered in the Microsoft Windows Internet Explorer address bar.
Alert level: high
Updated on Jan 08, 2009
Win32/Renos.gen!BA is a generic detection for a family of trojan downloaders that display fake warning messages indicating that spyware or malware has been detected on the machine, before downloading rogue security products, most notably Program:Win32/Antivirusxp or Trojan:Win32/FakeXPA. In the wild, Win32/Renos.gen!BA has been distributed via spam e-mail messages.
Alert level: severe
Updated on Feb 11, 2010
Trojan:Win32/Alureon.DH is a member of Win32/Alureon - a multi-component family of trojans involved in a broad range of subversive activities online that generate revenue from various sources for its controllers. Mostly, Win32/Alureon is associated with moderating an affected user's activities online to the attacker's benefit. In the wild, Trojan:Win32/Alureon.DH is used to download and install other malware, such as Rogue:Win32/FakeCog.
Alert level: severe
Updated on Mar 09, 2010
Virus:Win32/Alureon.G is a detection for system drivers infected by members of the Win32/Alureon family.
 
Win32/Alureon is a multi-component family of trojans involved in a broad range of subversive activities online in order to generate revenue from various sources for its controllers. Mostly, Win32/Alureon is associated with moderating affected user's activities online to the attacker's benefit. As such, the various components of this family have been used for:
  • modifying affected user's search results (search hijacking)
  • redirecting affected user's browsing to sites of the attacker's choice (browser hijacking)
  • changing DNS settings in order to redirect users to sites of the attacker's choice without the affected user's knowledge
  • downloading and executing arbitrary files, including additional components and other malware
  • serving illegitimate advertising
  • installing Rogue security software
  • banner clicking
 
Win32/Alureon also utilizes advanced stealth techniques in order to hinder the detection and removal of its various components.
 
As some variants of this trojan may modify DNS settings on the host computer to enable the attacker to perform these tasks. Therefore it may be necessary to reconfigure DNS settings after the trojan is removed from the computer.
Alert level: severe
Updated on Jun 14, 2010
Trojan:Win32/Killav.KS is a trojan that attempts to terminate certain security software processes.
Alert level: severe
Updated on Aug 17, 2010

Windows Defender Antivirus detects and removes this threat. See the Win32/InternetAntivirus description for more information.

Alert level: severe
Updated on Aug 17, 2010

Windows Defender Antivirus detects and removes this threat. See the Win32/Defmid description for more information.

Alert level: severe
Updated on Aug 17, 2010

Windows Defender Antivirus detects and removes this threat. See the Win32/Winwebsec description for more information.

Find out ways that malware can get on your PC.  

Alert level: severe
Updated on Aug 17, 2010

Windows Defender Antivirus detects and removes this threat. See the Win32/Winwebsec description for more information.

Alert level: severe
Updated on Aug 17, 2010

Microsoft security software detects and removes this family of threats.

This family of rogue security programs pretend to scan your PC for malware, and often report lots of infections. The program will say you have to pay for it before it can fully clean your PC.

However, the program hasn't really detected any malware at all and isn't really an antivirus or antimalware scanner. It just looks like one so you'll send money to the people who made the program. Some of these programs use product names or logos that unlawfully impersonate Microsoft products.

Even if you do pay to "unlock" the app, it won't do anything because your PC isn't actually infected with all that malware it "found".

Different brands of the rogues may modify various settings on your computer, end or close programs or system services, or block access to websites.

by other malware.

You can read more on our rogue page.

Find out ways that malware can get on your PC.

Alert level: severe
Updated on Aug 18, 2010
Win32/FakeFast is a family of programs that claims to scan for malware and displays fake warnings of "malicious programs and viruses". They then inform the user that they need to pay money in order to remove these non-existent threats.
Alert level: severe
Updated on Aug 18, 2010

Windows Defender Antivirus detects and removes this threat. See the Win32/FakePowav description for more information.

Alert level: severe