This Trojan downloads other files via the Internet and launches them for execution on the victim machine without the user’s knowledge or consent. It is a Windows PE EXE file. It is 113152 bytes in size. It is not packed in any way. This Trojan is written in Visual Basic.
Installation
Once...
This Trojan downloads another program via the Internet and launches it on the victim machine without the user’s knowledge or consent. It is a Windows PE EXE file. It is 38400 bytes in size. It is written in C++.
Installation
Once launched, the Trojan copies its body to the Windows system...
This Trojan downloads another program via the Internet without the user’s knowledge or consent. It is a Windows PE EXE file. It is 7293 bytes in size.
Installation
When launching, the Trojan injects its code into the system process "svchost.exe" and deletes its original file.
This Trojan provides a remote malicious user with access to the victim machine. It is a PHP script. It is 229051 bytes in size.
Installation
This backdoor can be installed on a web server by a remote malicious user by uploading it via FTP, using the administrator's log-in details which have already...
This Trojan downloads another program via the Internet and launches it on the victim machine without the user’s knowledge or consent. It is encrypted Java Script within an HTML document. It is 14147 bytes in size.
This Trojan provides a remote malicious user with access to the victim machine. It is a Windows PE EXE file. It is 48640 bytes in size. It is packed using UPX. The unpacked file is approximately 360KB in size.
Installation
The Trojan extracts the following file from its body:...
This Trojan masks its presence in the system from users and from other programs. It is a Windows PE SYS file. It is 40960 bytes in size. It is not packed in any way. It is written in C.
Installation
This malicious program will be installed to the victim machine together with other malicious...
Installation
Once launched, the Trojan copies its executable file as shown below:
%System%\drivers\runtime.sys
In order to ensure that the Trojan is launched each time the system is started, it creates a system service called "Runtime" which launches the Trojan executable file each time Windows is...