This Trojan delivers a malicious payload to the user’s computer. It is a Windows application (PE EXE file). It is 90 112 bytes in size. It is written in C++.

Installation

Once launched, the Trojan…

Once launched, the Trojan performs the following actions in a cycle with a 60-second interval:

It establishes a connection with the hosts:

ccoo***o.cc
cccoo***o.cc

If the connection to these…

This Trojan downloads files from the Internet and launches them without the user’s knowledge. It is a Windows dynamic library (PE DLL file). It is 4608 bytes in size. It is written in C++.

If your computer does not have an antivirus, and is infected by this malicious program, follow the instructions below to delete it:

Use Task Manager to terminate the Trojan process.

Delete the files…

This Trojan library is a component of another malicious program. When this library is loaded into the address space of any process, the following file is launched for execution:

C:\x.exe

The library…

If your computer does not have an antivirus, and is infected by this malicious program, follow the instructions below to delete it:

Delete the original Trojan file (its location will depend on how…

To execute its malicious code, the exploit uses a vulnerability that occurs when processing TrueType fonts, for which the SING table is formed in a special way (CVE-2010-2883), in the products Adobe…

This exploit program uses vulnerabilities in Adobe Reader and Acrobat to execute itself on the user’s computer. It is a PDF document containing Java Script. It is 5195 bytes in size.

The malware is a component of a Trojan downloader and includes a class file named “a”, which downloads a file from the Internet, from a link sent to it, and launches the downloaded file for execution….

If Microsoft Office is installed on the user’s computer, the Trojan sets the security level to low by registering the following values in the system registry key:…