Iitydramater.club在不同的dll文件中创建一个感染：
drvstore.dll 6.0.6002.18005, dmscript.dll 6.0.6001.18000, shimgvw.dll 6.0.6000.16386, shell32.dll 6.1.7600.16532, ehiMsgr.dll 0, defaultlocationcpl.dll 6.1.7600.16385, f3ahvoas.dll 6.0.6000.20734, rastls.dll 0, fontsub.dll 5.1.2600.5512, WsmSvc.dll 6.0.6002.18005, wmsdmod.dll 9.0.0.4503, CertEnroll.dll 6.0.6000.16386
Continue reading
DesktopCoordinator发生不同的DLL文件感染
KernelBase.dll 6.1.7600.16385, ImagingEngine.dll 6.0.6002.18005, wuaueng.dll 0, sqlxmlx.dll 2000.80.382.0, wpdbusenum.dll 6.1.7601.17514, cnetcfg.dll 6.0.2900.5512, wmpshell.dll 11.0.6000.6324, apihex86.dll 6.0.6001.18230, msscp.dll 9.0.0.4503, mprddm.dll 6.0.6001.18000, dxmasf.dll 11.0.6001.7118, dot3svc.dll 6.0.6000.16386, qdv.dll 6.6.6000.16386
Continue reading
洞察各种感染，如SkillFrequency
| Ransomware | EnkripsiPC Ransomware, Veracrypt Ransomware, .zzzzz File Extension Ransomware, BrLock Ransomware, CryptoHitman Ransomware, Red Alert Ransomware, Police Department University of California Ransomware, VapeLauncher, Exotic Ransomware, Merry X-Mas! Ransomware, WinRarer Ransomware, [email protected] Ransomware |
| Trojan | Virus.Win32.Sality.ag, Trojan.Amoevae, Abfewsm.A, Virus:Win32/Expiro.BC, Trojan.Necurs.A, IRC-Worm.Projax, Trojan-FakeAV.Win32.OpenCloud, Trojan-PSW.Win32.Certif.a, Int 13 Trojan, Trojan.Agent.ZRP, Troj/Agent-AAQY, Trojan.Ircbrute |
| Adware | Adware.PlayMP3Z.biz, AdStartup, Sqwire.a, Adware.Ejik, TestTimer, Application.Coopen, BitAccelerator.m, Noptify, UnSpyPC, MySearch.f, AdWare.AdMedia.ed |
| Browser Hijacker | Spyware.Known_Bad_Sites, Wonderfulsearchsystem.com, SafeSearch, Findamo.com, Widdit.com, CoolWebSearch.image, cpv.servefeed.info, Search.b1.org, Softnate.com, Fastbrowsersearch.com, Raresearchsystem.com, Searchvhb.com |
| Spyware | SpyPal, Real Antivirus, NewsUpdexe, Worm.NetSky, Bin, SpywareZapper, Immunizr, SuspenzorPC, WinXDefender, Fake.Advance, RegistryCleanFix |
‘$1000 Venmo Gift Card’ Pop-Up Scam生成的错误
0x0000004F, 0xf0823 CBS_E_NEW_SERVICING_STACK_REQUIRED Package needs a newer version of the servicing stack., 0x80240016 WU_E_INSTALL_NOT_ALLOWED Operation tried to install while another installation was in progress or the system was pending a mandatory restart., 0x8024D004 WU_E_SETUP_NOT_INITIALIZED Windows Update Agent could not be updated because setup initialization never completed successfully., 0x000000A1, 0x8024D007 WU_E_SETUP_REGISTRATION_FAILED Windows Update Agent could not be updated because regsvr32.exe returned an error., 0x80243001 WU_E_INSTALLATION_RESULTS_UNKNOWN_VERSION The results of download and installation could not be read from the registry due to an unrecognized data format version., 0x8024D009 WU_E_SETUP_SKIP_UPDATE An update to the Windows Update Agent was skipped due to a directive in the wuident.cab file., 0x80244009 WU_E_PT_SOAPCLIENT_READ Same as SOAPCLIENT_READ_ERROR – SOAP client failed while reading the response from the server., 0xf0805CBS_E_INVALID_PACKAGE the update package was not a valid CSI update, 0x80244032 WU_E_PT_ECP_INVALID_METADATA External cab processor found invalid metadata., Error 0xC0000001
Continue reading
Bmd Ransomware生成的错误
0x80248005 WU_E_DS_INVALIDTABLENAME A table could not be opened because the table is not in the data store., 0x80244012 WU_E_PT_DOUBLE_INITIALIZATION Initialization failed because the object was already initialized., 0x00000016, 0x80249001 WU_E_INVENTORY_PARSEFAILED Parsing of the rule file failed., 0x80244028 WU_E_PT_NO_AUTH_COOKIES_CREATED Windows Update Agent was unable to create any valid authentication cookies., 0x00000030, 0xf0818 CBS_E_IDENTITY_MISMATCH container package points to a package manifest whose identity doesn’t match the identity specified, 0x00000103, 0x00000079, 0x80244014 WU_E_PT_INVALID_COMPUTER_LSID Cannot determine computer LSID., Error 0xC1900200 – 0x20008, 0x80240021 WU_E_TIME_OUT Operation did not complete because it timed out., 0x8024C004 WU_E_DRV_NO_METADATA The driver update is missing metadata., 0x00000041, 0x8024D006 WU_E_SETUP_TARGET_VERSION_GREATER Windows Update Agent could not be updated because a WUA file on the target system is newer than the corresponding source file., 0x80244011 WU_E_PT_SUS_SERVER_NOT_SET WUServer policy value is missing in the registry.
Continue reading
以下浏览器被Cl Ransomware感染
| Mozilla Versions | Mozilla Firefox:45.4.0, Mozilla Firefox:46, Mozilla:45.5.1, Mozilla Firefox:43.0.2, Mozilla:46.0.1, Mozilla Firefox:39.0.3, Mozilla Firefox:40.0.2, Mozilla:39, Mozilla:44.0.2, Mozilla Firefox:47.0.2 |
| Internet Explorer Versions | Internet Explorer 8-8.00.6001.18702, IE 8:8.00.6001.18702, Internet Explorer 8-8.00.6001.18372, Internet Explorer 8-8.00.7000.00000, IE 7:7.00.5730.1300, IE 7:7.00.6000.16386, Internet Explorer 7-7.00.6000.16441, Internet Explorer 8-8.00.6001.17184 |
| Chrome Versions | Chrome 53.0.2785, Chrome 54.0.2840, Chrome 48.0.2564, Chrome 55.0.2883, Chrome 49.0.2623, Chrome 52.0.2743, Chrome 58.0.3026.0, Chrome 57.0.2987, Chrome 58.0, Chrome 50.0.2661 |
Baka Skimmer感染的浏览器
| Mozilla Versions | Mozilla:38, Mozilla:48.0.2, Mozilla:38.1.1, Mozilla Firefox:45.2.0, Mozilla Firefox:38.1.0, Mozilla Firefox:44.0.2, Mozilla Firefox:51, Mozilla Firefox:40.0.2, Mozilla Firefox:39.0.3, Mozilla:46.0.1, Mozilla Firefox:38.5.0, Mozilla:43.0.2, Mozilla:46, Mozilla Firefox:40.0.3 |
| Internet Explorer Versions | Internet Explorer 10-10.0.8400.00000, Internet Explorer 7-7.00.6000.16441, IE 7:7.00.6000.16441, IE 8:8.00.7000.00000, IE 8:8.00.6001.17184, IE 8:8.00.6001.18372 |
| Chrome Versions | Chrome 58.0.3026.0, Chrome 51.0.2704, Chrome 53.0.2785, Chrome 50.0.2661, Chrome 58.0, Chrome 54.0.2840, Chrome 56.0.2924, Chrome 57.0.2987, Chrome 55.0.2883, Chrome 49.0.2623, Chrome 52.0.2743 |
TheConverterSearch Search引起以下错误
0x00000113, 0x80244015 WU_E_PT_REFRESH_CACHE_REQUIRED The reply from the server indicates that the server was changed or the cookie was invalid; refresh the state of the internal cache and retry., 0x000000A1, 0x00000082, 0x8024401C WU_E_PT_HTTP_STATUS_REQUEST_TIMEOUT Same as HTTP status 408 – the server timed out waiting for the request., 0x80249004 WU_E_INVENTORY_UNEXPECTED There was an inventory error not covered by another error code., 0x0000000A, 0x00000013, 0x00000041, 0xf0805CBS_E_INVALID_PACKAGE the update package was not a valid CSI update, 0x000000C2, 0x0000009E, 0xf0816 CBS_E_DPX_JOB_STATE_SAVED job state for DPX has been saved, 0x0000000B
Continue reading
TopMusicSearches Search发生不同的DLL文件感染
mstlsapi.dll 5.1.2600.5512, rsca.dll 7.0.6000.17022, mshwkor.dll 6.0.6000.16386, ieui.dll 7.0.5730.13, WSDScDrv.dll 6.0.6000.16386, xpsservices.dll 7.0.6002.22573, dxva2.dll 5.0.1.1, docprop.dll 6.1.7600.16385, imapi.dll 6.0.6002.18005, ehOCGen.dll 5.1.2700.2180, sqlceqp30.dll 3.0.6001.0, IMTCSKF.dll 10.0.6000.16386, mshtml.dll 8.0.7601.21636
Continue reading
洞察各种感染，如SearchGames4U
| Ransomware | TrueCrypt Ransomware, Cerber Ransomware, CryptoBit Ransomware, Guardia Civil Ransomware, CommandLine Ransomware, [email protected] Ransomware, Levis Locker Ransomware, CryptoJacky Ransomware, Parisher Ransomware, Backdoor.Ingreslock Ransomware, Policia Federal Mexico Ransomware, [email protected] Ransomware, Netflix Ransomware, Manifestus Ransomware |
| Trojan | Trojan.Kexject.A, W32.Pinfi, Goldenboy worm, Infostealer.Serposteal, Troj/JSRedir-H, Trojan:VBS/Crypter.A, MalwareWipePro, VirTool:MSIL/Obfuscator.P, Virus.Obfuscator.XT, Trojan.Noviq.A |
| Adware | Trackware.Freesave, ClickTheButton, Outwar, 3wPlayer, SaveNow, Adware.Clickspring.B, WildTangent, Suggestor.Adware, Farmmext, ClientMan, Adware.Ezula, Qidion, Starcross 1.0, SwimSuitNetwork |
| Browser Hijacker | Iesafetylist.com, Frameseek, Websearch.searchmainia.info, MySearch, Os-guard2010.com, Softnate.com, Secureinvites.com, Mevio.com, Pconguard.com, ShopNav, Websearch.just-browse.info |
| Spyware | BugsDestroyer, WinSecureAV, AceSpy, Killmbr.exe, BrowserModifier.ShopNav, Transponder.Pynix, SpyCut, SystemChecker, VirusEffaceur, 4Arcade PBar, FKRMoniter fklogger |