Articles in the Kaspersky Category

Password-protected-EXE
Posted in Kaspersky on 26 May 2011

The antivirus product uses the message “Password-Protected-EXE” to show that the archive contains a small executable file.

The purpose of this is to provide protection against malware…

Exploit.Win32.CVE-2010-2568.z
Posted in Kaspersky on 5 May 2011

The exploit is designed to automatically launch other programs from USB-drives. It is a Windows shortcut (LNK-file). Its size is 461 bytes.

Trojan-Downloader.Win32.Agent.ehcj
Posted in Kaspersky on 6 April 2011

This Trojan downloads files from the Internet and launches them without the user’s knowledge. It is a Windows application (PE EXE file) and is 85 504 bytes in size. It is written in Delphi.

Trojan-Downloader.Win32.Agent.cvow
Posted in Kaspersky on 6 April 2011

This Trojan downloads files from the Internet and launches them without the user’s knowledge. It is a Windows application (PE EXE file) and is 16 896 bytes in size. It is packed using an unknown…

Trojan.Win32.Agent.dbyy
Posted in Kaspersky on 6 April 2011

This worm creates copies of itself on local disks and write-accessible removable disks. It is a Windows application (PE EXE file). It is 172 050 bytes in size. It is written in…

Trojan.MSIL.Agent.aor
Posted in Kaspersky on 6 April 2011

This Trojan is designed to steal confidential user information. It is a Windows .NET application (PE EXE file). It is 1 116 397 bytes in size.

Net-Worm.Win32.Kolab.hzo
Posted in Kaspersky on 6 April 2011

This worm provides a malicious user with remote access to an infected machine. It is a Windows application (PE EXE file). It is 221 696 bytes in size. It is packed using an unknown packer. The…

Trojan.Win32.Qhost.nrq
Posted in Kaspersky on 6 April 2011

Once launched, the Trojan copies the original file:

%System%\drivers\etc\hosts

to the file:

%System%\hosts

Then, the Trojan modifies the original “hosts” file by adding the following strings to it…

Worm.Win32.Agent.yt
Posted in Kaspersky on 6 April 2011

This worm creates copies of itself on local disks and write-accessible network resources. It is a Windows application (PE EXE file). It is 160 256 bytes in size. It is packed using ASPack. The…

Backdoor.Win32.Rbot.wbg
Posted in Kaspersky on 6 April 2011

This Trojan provides a malicious user with remote access to the infected computer. It is a Windows application (PE EXE file). It is 45 780 bytes in size. It is packed using SVKP. It is written in…