Malware Advisories (RSS)

This backdoor may be dropped by other malware, specifically TROJ_PPDROP.K. It may also be downloaded unknowingly by a user when visiting malicious Web sites.
This backdoor is injected into a process running in memory. It then creates a registry entry to enable its automatic execution at every system startup.
This backdoor allows a remote user to obtain files from an affected system. It accesses a remote site to allow a remote malicious user to connect to the affected system. Once a successful connection is established, the remote user is able to execute commands on the affected system.
It drops a non-malicious file into which it saves gathered information. It then sends the gathered information to a specific email address.
It sends the gathered information to a predetermined email address using its own Simple Mail Transfer Protocol (SMTP) engine.


More...