| Type |
Caption |
Section |
File name |
Description |
 |
Load |
|
vbseli.vbs |
Added by the W32/Refoav-A mass-mailing worm. This worm mails itself to everyone in your Outlook contact list. Read more |
 |
load-guard |
|
LGuarg.exe |
Added by the VBS.YENO.C WORM! Read more |
 |
load-guard |
|
LGuarg.exe.vbs |
Added by the VBS.YENO.C WORM! Read more |
 |
Load-Guard |
|
Wscript.exe LGuarg.exe |
Added by the YENO.B and YENO.C WORMS! Read more |
 |
Load-Guard |
|
Wscript.exe LGuarg.exe.vbs |
Added by the YENO.B and YENO.C WORMS! Read more |
 |
load32 |
|
1111a.exe |
Added by the DUMARU.AH WORM! Read more |
 |
load32 |
|
l32x.exe |
Added by the DUMARU.Z or DUMARU.Y or DUMARU.AD WORM! Read more |
 |
load32 |
|
load32.exe |
Added by the NIBU, BAMBO TROJANS and DUMARU WORM! Read more |
 |
LOAD32 |
|
Lorena.exe |
Added by the MAPSON.C WORM! Read more |
 |
load32 |
|
swchost.exe |
Added by the TURTA.A WORM! Read more |
 |
load= |
|
a1g.exe |
Added by the ATAK.B WORM! Read more |
 |
load= |
|
dapdll.exe |
Added by the ATAK.E WORM! Read more |
 |
load= |
|
hint.exe |
Added by the ATAK WORM! Read more |
 |
load= |
|
shambl3r.exe |
Added by the REMABL WORM! Read more |
 |
load= |
|
win32exec.exe |
Added by the BITTER WORM! Read more |
 |
LoadDBackUp |
|
BcTool.exe |
Added by the GIBE WORM! Read more |
 |
Loaders |
|
HeIp.exe |
Added by the W32/Sdbot-ADB worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands. Read more |
 |
Loaders |
|
HeIp.pif |
Added by the W32/Sdbot-ACS worm. When started, this infection connects to a remote IRC server where it waits for commands to execute. Read more |
 |
LoadManager |
|
msload.exe |
Added by the OPASERV.T WORM! Read more |
 |
LoadPowerProfile |
|
Rundll32.exe |
Added by the MIROOT WORM! Note - do not confuse with the valid LoadPowerProfile entry which has "powrprof.dll" appended to the command/data line Read more |