Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
99 entries found. Displaying page 4 of 5.
Updated on Oct 28, 2012

Backdoor:Win32/Talsab.C is a trojan that records keystrokes and allows unauthorized access and control of your computer.

Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.VD is an AutoIt worm that spreads via removable drives and may download its components from a remote Web site.
Alert level: severe
Updated on May 21, 2011

TrojanSpy:Win32/Bancos.AAM is a member of Win32/Bancos - a family of data-stealing trojans that captures online banking credentials, such as account login names and passwords, and relays the captured information to a remote attacker. Most Win32/Bancos variants target customers of Brazilian banks, though some variants target customers of banks in other locations.

Alert level: severe
Updated on Jun 22, 2011
Trojan:Win32/Delf.KE is a malicious program that is unable to spread of its own accord. It may perform a number of actions of an attacker's choice on an affected computer.
Alert level: severe
Updated on Jun 25, 2012
Backdoor:Win32/Etumbot.B is a backdoor trojan that allows attackers unauthorized access and control of an affected computer. After a computer is infected, the trojan connects to a specific IRC server and joins a specific channel to receive commands from attackers. Commands can instruct the trojan to spread to other computers by scanning for network shares with weak passwords, exploiting Windows vulnerabilities, or possibly spreading through backdoor ports opened by other families of malicious software. The trojan may also allow attackers to perform other backdoor functions, such as launching denial of service (DoS) attacks and retrieving system information from infected computers.
Alert level: severe
Updated on Oct 28, 2012
Backdoor:Win32/Blohi.A is a trojan that allows unauthorized access and control of an affected computer.
Alert level: severe
Updated on Dec 18, 2012
Backdoor:Win32/Vonost.A is a trojan that allows unauthorized access and control of an affected computer.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Hamweq.BG is a worm that spreads via removable drives, such as USB memory sticks. It contains an IRC-based backdoor, which may be used by a remote attacker to order the affected machine to participate in Distributed Denial of Service attacks, or to download and execute arbitrary files.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Kaaneut.A is a worm that can spread to mapped drives, such as network shares and removable drives. It is disguised as the Windows Media Player program; when it arrives in the computer it may have the same icon as Windows Media Player. When it runs, it also runs the Windows Media Player program to further maintain the its disguise.
 
Worm:Win32/Kaaneut.A may change some of the computer's settings, such as disabling System Restore, hiding file extensions in Windows Explorer, and attempting to disable the Windows Security Center. It may also connect to certain Web sites to download arbitrary files.
Alert level: severe
Updated on Jul 11, 2011

PWS:Win32/VB.CU is a trojan that steals certain information from the affected computer. It also stops the SharedAccess service and overwrites certain files.

Alert level: severe
Updated on Jun 25, 2012
Trojan:Win32/Hspam.A is a malicious program that is unable to spread of its own accord. It may perform a number of actions of an attacker's choice on an affected computer.
Alert level: severe
Updated on Apr 27, 2011
TrojanDownloader:Win32/Quillo.A is a trojan that silently downloads and installs other programs without consent. This could include the installation of additional malware or malware components to an affected computer.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.ABQ is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Mar 03, 2013
Backdoor:Win32/Blohi.D is a trojan that allows unauthorized access and control of an affected computer.
Alert level: severe
Updated on Nov 12, 2012
Worm:Win32/Autorun.AGQ is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
TrojanSpy:Win32/Bancos.YM is a member of Win32/Bancos - a family of data-stealing trojans that captures online banking credentials, such as account login names and passwords, and relays the captured information to a remote attacker. Most Win32/Bancos variants target customers of Brazilian banks, though some variants target customers of banks in other locations.
Alert level: severe
Updated on Apr 11, 2011
Backdoor:Win32/IRCbot.EW is a member of Win32/IRCbot - a broad family of backdoor trojans that allows unauthorized access and control of an affected computer by a remote attacker via IRC.
Alert level: severe
Updated on Jun 01, 2015

Microsoft security software detects and removes this family of threats.

This family of worms can download other malware, including PWS:Win32/Zbot.

They spread through infected network and removable drives.

Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.ABG is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.ABC is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe