Posts Tagged ‘trojan win32’

There was a flash, and then my startpage was gone.

Mar

2013

We recently came across the file 1ac150ddb964722b6b7c96808763b3e4d0472daf during the course of regular research. We detect this file as Trojan:Win32/Preflayer.A. The file had been distributed with the file name FlashPlayer.exe and not surprisingly, when executed, it shows the following GUI, partly written in Turkish: Obviously, it’s disguised as an Adobe Flash Player 11 installer. The text section of […]

Category General Written by Microsoft Malware Protection Center 0 Comments

Reminder: be careful opening invoices on the 21st March

Mar

2013

On March 4th we spotted a large number of unusual emails being blocked by our Linux Mail Security product. The emails all contained the same PDF attachment (MD5: 97b720519aefa00da58026f03d818251) but were being sent from many different source addresses. The emails were written in German and most were sent from German IP addresses. Below is a […]

Category General Written by Securelist / Blog 0 Comments

Brazilian Masquerade

Feb

2013

What do you see here?A free AV product protecting a Windows XP machine, right? No, actually it?s malware ? a Brazilian Trojan banker coming via email and then using a masquerade to stay in the system. The malware is 386Kb only, written in Delphi, and comes via an email together with a bunch of many […]

Category General Written by Securelist / Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘trojan win32’

There was a flash, and then my startpage was gone.

Reminder: be careful opening invoices on the 21st March

Brazilian Masquerade

Categories

Featured

Archives

Latest Comments

About Us

Contact Us