Archive for March, 2007
Friday, March 30th, 2007
This Trojan is designed to steal user passwords. It is a Windows PE EXE file. It is 10,240 bytes in size. It is not packed in any way. It is written in Visual C++.
Installation
Once launched, the Trojan copies itself to the Windows system directory as "winsys.dll". The Trojan also creates the...
Posted in Virus Threats | Comments Off
Friday, March 30th, 2007
This Trojan is designed to steal confidential data. It is a Windows PE EXE file. The file is 7,680 bytes in size. It is not packed in any way. It is written in C++.
Installation
When launched, the Trojan copies itself to the Windows system directory:
%System%/<trojan_name>.exe
It then...
Posted in Virus Threats | Comments Off
Friday, March 30th, 2007
This Trojan is designed to steal confidential data. It is a Windows PE EXE file. The file is 7,680 bytes in size. It is not packed in any way. It is written in C++.
Installation
When launched, the Trojan copies itself to the Windows system directory:
%System%/<trojan_name>.exe
It then...
Posted in Virus Threats | Comments Off
Thursday, March 29th, 2007
This Trojan is designed to steal user passwords. It is a Windows PE EXE file. It is 70,144 bytes in size.
Installation
When launched, the Trojan copies its executable file to the Windows system directory:
%System%\robber1.exe
The Trojan also adds a link to its executable file in the system...
Posted in Virus Threats | Comments Off
Wednesday, March 28th, 2007
This Trojan program is designed to steal confidential data. It is a Windows PE EXE file, and is 34304 bytes in size. It is packed using a customized packer.
The Trojan copies itself to
%sysdir%\ntos.exe
with system, read only and archive attributes.
When copying it appends random-sized junk to...
Posted in Virus Threats | Comments Off
Monday, March 26th, 2007
This Trojan is a JavaScript scenario. It can be found on web pages. The file is 1,335 bytes in size.
Posted in Virus Threats | Comments Off
Friday, March 23rd, 2007
This Trojan program is designed to steal confidential data. It is a Windows PE EXE file, and is 34304 bytes in size. It is packed using a customized packer.
The Trojan copies itself to
%sysdir%\ntos.exe
with system, read only and archive attributes.
When copying it appends random-sized junk to...
Posted in Virus Threats | Comments Off
Friday, March 23rd, 2007
This Trojan program makes it possible for a remote malicious user to use the victim machine as a proxy server. It is a Windows PE EXE file. The file is approximately 17KB in size. It is packed using UPack. The unpacked file is approximately 258KB in size.
Installation
Onced launched, the Trojan...
Posted in Virus Threats | Comments Off
Friday, March 23rd, 2007
This Trojan is designed to steal confidential information (user passwords). It is designed to steal a range of confidential information.
It is a Windows PE EXE file. It is 25,600 bytes in size. It is packed using UPX. The unpacked file is approximately 250KB in size. It is written in Assembler.
Posted in Virus Threats | Comments Off
Friday, March 23rd, 2007
This program is an MS Word document (a DOC file). It is 34,816 bytes in size. It is written in MSWord’s macro language.
Posted in Virus Threats | Comments Off
Friday, March 23rd, 2007
This Trojan has a malicious payload. The Trojan is a Windows PE EXE file. It is 4,096 bytes in size.
Installation
When launched, the Trojan copies its executable file to the Windows root directory
:
%WinDir%\memorium.exe
In order to ensure that the Trojan is launched automatically each time...
Posted in Virus Threats | Comments Off
Friday, March 23rd, 2007
This Trojan logs the user’s keystrokes. It is a Windows PE EXE file. It is written in Visual C++. The file is 6,144 bytes in size. The file is packed using UPX. The unpacked file is approximately 31KB in size.
Installation
Once launched, the Trojan copies itself to the Windows system...
Posted in Virus Threats | Comments Off
Thursday, March 22nd, 2007
This Trojan program makes it possible for a remote malicious user to use the victim machine as a proxy server. It is a Windows PE EXE file. The file is approximately 15KB in size. It is written in Visual C++. It is packed using UPack. The unpacked file is approximately 258KB in...
Posted in Virus Threats | Comments Off
Thursday, March 22nd, 2007
This Trojan tracks the user's keystrokes, and is designed to steal confidential information. It is a Windows PE EXE file. It is 136,192 bytes in size. It is not packed in any way. It is written in Visual C++.
Installation
When launched, the Trojan displays the following dialogue box:...
Posted in Virus Threats | Comments Off
Thursday, March 22nd, 2007
This Trojan tracks the user's keystrokes, and is designed to steal confidential information. It is a Windows PE EXE file. It is 376,832 bytes in size. It is not packed in any way. It is written in Borland Delphi.
Installation
Once launched, the Trojan registers itself in the system registry:...
Posted in Virus Threats | Comments Off