Mal/EncPk-KO
Category
* Viruses and Spyware
Type
* Malicious Behavior
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/malencpkko.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Malicious Behavior
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/malencpkkt.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojbredozpg.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrcuk.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrcum.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojfakeavadn.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojmdropcgg.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojsirefefa.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Worm
How it spreads
* Removable storage devices
Affected operating systems Windows
W32/Autorun-ASA will create a copy of itself in:
%system%\srvcut.exe
W32/Autorun-ASA triggers the following HIPS rules:
HIPS/FileMod-001
HIPS/RegMod-002
HIPS/ProcMod-002
http://www.sophos.com/security/analyses/viruses-and-spyware/w32autorunasa.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Malicious Behavior
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/malencpkkq.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojfakealeql.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrcul.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojbhonv.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojagentlhg.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojagentlhf.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojagentlhe.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojagentlhd.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojagentlhc.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojagentlhb.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Malicious Behavior
How it spreads
* Infected files
Affected operating systems Windows
Mal/Scribble-D is a file infected by the Scribble family of viruses.
http://www.sophos.com/security/analyses/viruses-and-spyware/malscribbled.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojmdropcgi.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
Characteristics
* Installs itself in the registry
Troj/Delf-FDI is a Trojan for the Windows platform.
When run Troj/Delf-FDI copies itself to <Recycled>\<User>\nvapbar.exe and sets the following registry entry:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Taskman
<Recycled>\<User>\nvapbar.exe
http://www.sophos.com/security/analyses/viruses-and-spyware/trojdelffdi.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojbckdrqyw.html?_log_from=rss
Type
Virus
SubType
Win32
Overview -
This is a virus detection. Viruses are programs that self-replicate recursively, meaning that infected systems spread the virus to other systems, which then further propagate the virus. Although many viruses contain a destructive payload, it's quite common for viruses to do nothing more than spread from one system to another.
W32/PhilPedo.a is a file infecting virus. It scans for executable files in the infected machine to prepend them with its viral code.
Aliases
* Kaspersky:Trojan.Win32.Cossta.yr
* Microsoft : Trojan:Win32/Vorus.k
* Symantec :Infostealer
More: http://vil.nai.com/vil/content/v_237188.htm
Category
* Viruses and Spyware
Type
* Exploit
Affected operating systems Windows
Exp/MS08-021 detects malicious files that exploit a vulnerability in the Windows GDI.
More details regarding the exploit can be obtained from Microsoft at:
http://www.microsoft.com/technet/security/bulletin/ms08-021.mspx
http://www.sophos.com/security/analyses/viruses-and-spyware/expms08021.html?_log_from=rss
Aliases
* Win32/VBInject.gen!BW
Category
* Viruses and Spyware
Type
* Malicious Behavior
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/malinjects.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojagentjhx.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojagentlhj.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
Troj/Bredolab-G is a Trojan for the Windows platform.
Troj/Bredolab-G includes functionality to access the internet and communicate with a remote server via HTTP.
When first run Troj/Bredolab-G copies itself to:
<Temp>\~tm5.tmp
<Startup>\ikowin32.exe
and creates the file <User>\Application Data\wiaserva.log.
http://www.sophos.com/security/analyses/viruses-and-spyware/trojbredolabg.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojcutwailf.html?_log_from=rss
Category
* Viruses and Spyware
Type
* Trojan
Affected operating systems Windows
http://www.sophos.com/security/analyses/viruses-and-spyware/trojdloadrcun.html?_log_from=rss
Help, my PC with Windows 10 won't shut down properly
Since upgrading to Windows 10 my computer won't shut down properly. I use the menu button shutdown and the screen goes blank, but the system does not fully shut down. The only way to get it to shut down is to hold the physical power button down till it shuts down. Any suggestions?