| Type |
Caption |
Section |
File name |
Description |
 |
WheelsMouse |
|
<path to Trojan> |
Added by the Troj/SocksPr-D proxy server Trojan. Read more |
 |
Win_BooT |
|
<Path to Trojan> |
Added by the Troj/Banker-GI password-stealing Trojan. Read more |
 |
WinShell |
|
<path to worm> |
Added by the W32/Fanbot-B mass-mailing and P2P worm. Read more |
 |
Devicewin |
|
<pathname of the Trojan executable> |
Added by the Troj/Banker-AEV Trojan. Read more |
 |
kernel32.dll |
|
<pathname of the Trojan executable> |
Added by the Troj/Zlob-AP Trojan. Read more |
 |
Microsoft Redirect |
|
<pathname of the Trojan executable> |
Added by the Troj/Banker-FW Internet banking Trojan. Read more |
 |
msresear |
|
<pathname of the Trojan executable> |
Added by the Troj/Weasyw-B Trojan. Read more |
 |
Rapdyleys |
|
<pathname of the Trojan executable> |
Added by the Troj/QQPass-AD Trojan. Read more |
 |
MSPRO32 |
|
<pathname of the worm executable> |
Added by the W32/Hiberi-B worm. Read more |
 |
Winsocket log |
|
<random characters>.exe |
Added by the Troj/Sdbot-AKF worm and IRC backdoor. Read more |
 |
SysTray.Exys |
|
<random filename with DLL extension> |
Added by the Troj/Slogger-D Trojan.br /br /Uses CLSID: b{7368D5FC-6F5C-4f5b-B964-E67214F67852}/b. Read more |
 |
DER005 |
|
<random filename> |
Added by the Troj/Hackvan-B Trojan rootkit. Read more |
 |
Idoneus |
|
<random filename> |
Added by the MSIL.Idonut virus. Read more |
 |
Msn Update SUPPORT |
|
<random filename> |
Added by the W32/Rbot-BPS worm and IRC backdoor. Read more |
 |
Service Screan |
|
<random filename> |
Added by the W32/Rbot-BAC worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
Telnet24 |
|
<random filename> |
Added by the W32/Rbot-ARD worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Win Prosess0r |
|
<random filename> |
Added by the W32/Rbot-BIT worm and IRC backdoor. Read more |
 |
XRW005 |
|
<random filename> |
Read more |
 |
DBGA0EEG |
|
<random filename>.dll |
Added by the W32/Doxpar-D password-stealing network worm.br /br /Uses CLSID: b{6C7F7D05-2430-7FA8-28C5-2F9036BF28AF}/b. Read more |
 |
eTunnel |
|
<random filename>.exe |
Added by the Troj/Meteor-E backdoor Trojan. Read more |
 |
Windows Firewall Monitor |
|
<random filename>.exe |
Added by the Troj/Proxy-AX proxy Trojan. Read more |