http://www.securelist.com/en/ 04 Feb 2012 06:13:55 +0400 http://www.securelist.com/en/rss/klogo.gif http://www.securelist.com/en/ webmaster@securelist.com () This Trojan downloads other malicious programs from the Internet and launches them for execution without the user's knowledge. It is a Windows dynamic library (PE EXE file). It is 53 248 bytes in... http://www.securelist.com/en/descriptions/Trojan-Downloader.Win32.Agent.dlyf http://www.securelist.com/en/descriptions/Trojan-Downloader.Win32.Agent.dlyf 02 Feb 2012 18:01:00 +0400 webmaster@securelist.com () This Trojan delivers a malicious payload to the user's computer. It is a Windows application (PE EXE file). It is 352 256 bytes in size. It is written in Visual Basic. Installation When launching,... http://www.securelist.com/en/descriptions/Trojan.Win32.VB.aeke http://www.securelist.com/en/descriptions/Trojan.Win32.VB.aeke 02 Feb 2012 17:51:00 +0400 webmaster@securelist.com () This Trojan delivers a malicious payload to the user's computer. It is a Windows application (PE EXE file). It is 142 848 bytes in size. It is written in Delphi. http://www.securelist.com/en/descriptions/Trojan.Win32.Smardf.mlt http://www.securelist.com/en/descriptions/Trojan.Win32.Smardf.mlt 02 Feb 2012 17:10:00 +0400 webmaster@securelist.com () When the infected page is opened, Java class code starts to run, which leads to the following actions: The following file is created and launched: Ñ:\Windows\pay.reg This causes a change in... http://www.securelist.com/en/descriptions/Trojan.Java.Payphish.a http://www.securelist.com/en/descriptions/Trojan.Java.Payphish.a 01 Feb 2012 13:17:00 +0400 webmaster@securelist.com () This Trojan provides a malicious user with remote access to the infected computer. It is a Windows application (PE EXE file). It is 365 568 bytes in size. It is written in Delphi. Installation Once... http://www.securelist.com/en/descriptions/Backdoor.Win32.Delf.ugd http://www.securelist.com/en/descriptions/Backdoor.Win32.Delf.ugd 01 Feb 2012 13:03:00 +0400 webmaster@securelist.com () Once launched, the Trojan decrypts its body and then downloads files from the following URL addresses: http://195.***.144.79/psyim_dfgjkeqw.exe http://195.***.144.79/setup.exe http:... http://www.securelist.com/en/descriptions/Trojan-Downloader.Win32.Genome.atab http://www.securelist.com/en/descriptions/Trojan-Downloader.Win32.Genome.atab 01 Feb 2012 12:39:00 +0400 webmaster@securelist.com () This exploit program uses vulnerabilities in Adobe Reader and Acrobat to execute itself on the user's computer. It is a PDF document containing XML Forms Architecture and Java Script. It is 26,393... http://www.securelist.com/en/descriptions/Exploit.JS.Pdfka.dna http://www.securelist.com/en/descriptions/Exploit.JS.Pdfka.dna 26 Jan 2012 18:15:00 +0400 webmaster@securelist.com () This Trojan downloads other malicious programs from the Internet and launches them for execution without the user's knowledge. It is a Windows application (PE EXE file). It is 21 504 bytes in size.... http://www.securelist.com/en/descriptions/Trojan-Downloader.Win32.Genome.asvq http://www.securelist.com/en/descriptions/Trojan-Downloader.Win32.Genome.asvq 26 Jan 2012 15:41:00 +0400 webmaster@securelist.com () This Trojan downloads other malicious programs from the Internet and launches them for execution without the user's knowledge. It is a Windows application (PE EXE file). It is 21 504 bytes in size.... http://www.securelist.com/en/descriptions/Trojan-Downloader.Win32.Genome.asut http://www.securelist.com/en/descriptions/Trojan-Downloader.Win32.Genome.asut 26 Jan 2012 14:54:00 +0400 webmaster@securelist.com () The Trojan creates a file named "Deleteme.bat" in its working directory and launches it for execution: %WorkDir%\Deleteme.bat The launched file deletes the Trojan's original body and deletes... http://www.securelist.com/en/descriptions/Trojan.Win32.Slefdel.fpk http://www.securelist.com/en/descriptions/Trojan.Win32.Slefdel.fpk 26 Jan 2012 14:42:00 +0400 webmaster@securelist.com () This Trojan delivers a malicious payload to the user's computer. It is a Windows application (PE EXE file). It is 18 944 bytes in size. It is written in C++. http://www.securelist.com/en/descriptions/Trojan.Win32.Sasfis.rer http://www.securelist.com/en/descriptions/Trojan.Win32.Sasfis.rer 25 Jan 2012 17:55:00 +0400 webmaster@securelist.com () Once launched, the Trojan decrypts and extracts the following file from its body to the current user's temporary directory: %Temp%<rnd1>.tmp where <rnd1> is a random set of numbers and... http://www.securelist.com/en/descriptions/Trojan.Win32.Sasfis.ole http://www.securelist.com/en/descriptions/Trojan.Win32.Sasfis.ole 25 Jan 2012 17:46:00 +0400 webmaster@securelist.com () This Trojan delivers a malicious payload to the user's computer. It is a Windows application (PE EXE file). It is 16 384 bytes in size. It is written in C++. http://www.securelist.com/en/descriptions/Trojan.Win32.Qhost.nhn http://www.securelist.com/en/descriptions/Trojan.Win32.Qhost.nhn 25 Jan 2012 17:37:00 +0400 webmaster@securelist.com () Òðîÿíñêàÿ ïðîãðàììà, ïîðàæàþùàÿ... http://www.securelist.com/en/descriptions/Trojan-SMS.J2ME.Agent.s http://www.securelist.com/en/descriptions/Trojan-SMS.J2ME.Agent.s 24 Jan 2012 15:51:00 +0400 webmaster@securelist.com () The Trojan creates a copy of the original "hosts" file under the following name: C:\h.tmp The Trojan writes the following string in the file created: 85.***.206.115 u070***010u.com It replaces the... http://www.securelist.com/en/descriptions/Trojan.Win32.Qhost.mxb http://www.securelist.com/en/descriptions/Trojan.Win32.Qhost.mxb 24 Jan 2012 12:40:00 +0400 webmaster@securelist.com () This Trojan delivers a malicious payload to the user's computer. It is a Windows application (PE EXE file). It is 49 162 bytes in size. It is written in Delphi. Installation Once launched, the... http://www.securelist.com/en/descriptions/Trojan.Win32.Agent.fadd http://www.securelist.com/en/descriptions/Trojan.Win32.Agent.fadd 24 Jan 2012 12:31:00 +0400 webmaster@securelist.com () This Trojan delivers a malicious payload to the user's computer. It is a Windows application (PE EXE file). It is 48 650 bytes in size. It is written in Delphi. Installation Once launched, the... http://www.securelist.com/en/descriptions/Trojan.Win32.Agent.ezqu http://www.securelist.com/en/descriptions/Trojan.Win32.Agent.ezqu 24 Jan 2012 12:20:00 +0400 webmaster@securelist.com () This Trojan delivers a malicious payload to the user's computer. It is a Windows application (PE EXE file). It is 47 114 bytes in size. It is written in Delphi. Installation Once launched, the... http://www.securelist.com/en/descriptions/Trojan.Win32.Agent.ezqk http://www.securelist.com/en/descriptions/Trojan.Win32.Agent.ezqk 23 Jan 2012 16:18:00 +0400 webmaster@securelist.com () This Trojan delivers a malicious payload to the user's computer. It is a Windows application (PE EXE file). It is 49 162 bytes in size. It is written in Delphi. Installation Once launched, the... http://www.securelist.com/en/descriptions/Trojan.Win32.Agent.ezqg http://www.securelist.com/en/descriptions/Trojan.Win32.Agent.ezqg 23 Jan 2012 16:11:00 +0400 webmaster@securelist.com () Once launched, the Trojan decrypts and extracts the following file from its body to the current user's temporary directory: %Temp%<rnd1>.tmp where <rnd1> is a random set of numbers and... http://www.securelist.com/en/descriptions/Trojan.Win32.Agent.dfab http://www.securelist.com/en/descriptions/Trojan.Win32.Agent.dfab 23 Jan 2012 14:33:00 +0400