77 entries found. Displaying page 3 of 4.
Updated on Apr 11, 2011
VirTool:WinNT/Koobface.B is a detection for the device driver component used by other malware to monitor and redirect network connections.
Alert level: severe
Updated on Apr 11, 2011
VirTool:WinNT/Koobface.C is a detection of a kernel-mode device driver component used by other malware to intercept and manipulate DNS queries, TCP connections, and other traffic. The malware can redirect DNS results and block network connections and traffic.
Alert level: severe
Updated on Apr 11, 2011
VirTool:WinNT/Koobface.E is a detection of a kernel-mode device driver component used by other malware to intercept and manipulate DNS queries, TCP connections, and other traffic. The malware can redirect DNS results and block network connections and traffic.
Alert level: severe
Updated on May 17, 2010
TrojanProxy:Win32/Koobface.gen!G is the generic detection for a DLL component of the Win32/Koobface family. It is installed as a system service and redirects the browser to an attacker-controlled server when certain legitimate Web sites are accessed.
Alert level: severe
Updated on Apr 11, 2011
VirTool:WinNT/Koobface.D  is a detection of a kernel-mode device driver component used by other malware to intercept and manipulate DNS queries, TCP/UDP connections, and other traffic. The malware can redirect DNS results and block network connections and traffic.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Koobface.P is a worm that spreads by posting messages, containing a link to the worm, to the pages of other contacts on social network sites such as Facebook. This variant of Koobface may arrive posing as an installer for the Internet communications application "Skype".
Alert level: severe
Updated on Apr 11, 2011
Trojan:SWF/Koobface.A is a detection for Shockwave format files that redirect the Web browser to a specific Web site that has been observed to distribute variants of Win32/Koobface and rogue security programs.
Alert level: severe
Updated on May 17, 2010
VirTool:WinNT/Koobface.D is a detection of a kernel-mode device driver component used by other malware to intercept and manipulate DNS queries, TCP connections, and other traffic. The malware can redirect DNS results and block network connections and traffic.
Alert level: severe
Updated on Apr 11, 2011
Trojan:JS/Koobface.C is a detection for a malicious JavaScript that displays a "Flash video" graphic and requests the user to download an executable to watch the video. The executable is detected as a variant of Win32/Koobface.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Koobface.U is a worm that spreads by posting messages, containing a link to the worm, to the pages of other contacts on social network sites such as Facebook. The worm has backdoor functionality that allows limited remote access and control.
Alert level: severe
Updated on May 17, 2010
Trojan:Win32/Koobface.gen!J is a component of the greater Win32/Koobface family of trojans. It is used to trick the affected user into breaking CAPTCHAs of the attacker's choice.
Alert level: severe
Updated on Apr 11, 2011
VirTool:Win32/VBInject.DR is a detection for obfuscated Visual Basic compiled malicious code. The malicious code or file is usually encrypted and/or compressed, and is decrypted and decoded before it is injected into a process or dropped and executed.
Alert level: severe
Updated on May 27, 2010
VirTool:Win32/VBInject.gen!DG is a generic detection for obfuscated Visual Basic-compiled malware. The loader, which is also detected as VirTool:Win32/VBInject.gen!DG, is written in Visual Basic and has the encrypted malicious code embedded in its body. The embedded malicious code is then executed,...
Alert level: severe
Updated on Apr 11, 2011
Win32/Dontovo.A is a trojan that downloads and executes arbitrary files.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Emold.U is a worm that spreads via removable drives. It downloads another malware, which is detected as Worm:Win32/Koobface.gen!D. It also drops another malware, which is detected as VirTool:WinNT/Emold.gen!A.
Alert level: severe
Updated on Apr 15, 2011
Spammer:Win32/Fifesock.A is a component of Win32/Fifesock - a multiple component trojan family that injects code into Internet Explorer and Firefox in order to steal the user’s social networking credentials for sites such as Facebook, Twitter and Blogspot, and then uses these credentials to...
Alert level: severe
Updated on Apr 11, 2011
Trojan:Win32/Lamechi.B is a trojan that injects malicious code into clean files.
Alert level: severe
Updated on Apr 11, 2011
TrojanDropper:Win32/Preald.B is a trojan that installs additional malware onto an affected machine.
Alert level: severe
Updated on Apr 11, 2011
TrojanDownloader:Win32/Branvine.A is a trojan that downloads and executes arbitrary files. In the wild it has been observed downloading and installing malware from several different families, including some associated with Rogue security software.
Alert level: severe
Updated on May 25, 2010
TrojanDownloader:Win32/Harnig.gen!J is a generic detection for trojans that download and execute arbitrary files, including additional Harnig downloaders and variants of other malware families.
Alert level: severe