Adware, malware, spyware, hijacker discussion and information

[Gain Knowledge]  [Install Prevention]  [Maintain Security]  [Spyware Removal Help]


It is currently Sat May 25, 2013 9:52 pm

Board index » HiJackThis! Log Assessment-Spyware Help » Latest Malware Threats

All times are UTC - 7 hours




Post new topic Reply to topic  Page 2 of 2
  [ 33 posts ]  Go to page Previous  1, 2
  Print view Previous topic | Next topic 
Author Message
TeMerc
 Post subject:
PostPosted: Fri Feb 17, 2006 9:46 am 
Offline
Site Admin
Site Admin
User avatar

Joined: Fri Jan 28, 2005 5:16 pm
Posts: 15966
Location: PHX, AZ
Yes, there is no level these dumb asses won't stoop to to try and sneak in a link. I expect there will be others to try the same thing. :twisted:

Email and IP !*!* ban is all I can do. Even those are easy to circumvent.

But that won't stop me from doing it. :lol:

_________________
Image


IP:
top
Top
 Profile Send private message  
 
TeMerc
 Post subject:
PostPosted: Fri Mar 03, 2006 11:32 pm 
Offline
Site Admin
Site Admin
User avatar

Joined: Fri Jan 28, 2005 5:16 pm
Posts: 15966
Location: PHX, AZ
A new file has been found in the SpyFalcon infection:

ginuerep.dll

Located in the C\WINNT\system32 folder. The fix at Bleeping Computing has been updated to include its removal.

_________________
Image


IP:
top
Top
 Profile Send private message  
 
TeMerc
 Post subject:
PostPosted: Tue Apr 25, 2006 11:16 pm 
Offline
Site Admin
Site Admin
User avatar

Joined: Fri Jan 28, 2005 5:16 pm
Posts: 15966
Location: PHX, AZ
New SpyFalcon Variant Found:

Grinler wrote:
A new variant of the installer was spotted by D-Trojanator today. Nice find!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"
"{CA14EE13-ED15-C4A2-17FF-DA4D15C1BC5E}"="Twain"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InProcServer32]
@="%SystemRoot%\system32\browseui.dll"


[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32]
@="%SystemRoot%\system32\browseui.dll"


[HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CA14EE13-ED15-C4A2-17FF-DA4D15C1BC5E}\InProcServer32]
@="C:\WINDOWS\system32\twain32.dll"

The Bleeping Computer self-help guide has been updated along with the reg file.

_________________
Image


IP:
top
Top
 Profile Send private message  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 2 of 2
  [ 33 posts ]  Go to page Previous  1, 2

Board index » HiJackThis! Log Assessment-Spyware Help » Latest Malware Threats

All times are UTC - 7 hours


Who is online

Users browsing this forum: No registered users and 1 guest

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  

Who is online
Who is online In total there is 1 user online :: 0 registered, 0 hidden and 1 guest (based on users active over the past 5 minutes)
Most users ever online was 282 on Tue Sep 25, 2012 11:30 am

Users browsing this forum: No registered users and 1 guest

New posts    No new posts    Forum locked
cron
Powered by phpBB