Virus Bulletin :: What next? Trojan.Linkoptimizer
Tags
country: Canada Italy Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Indirect Control Panel - T1218.002 Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Rundll32 - T1218.011 Server - T1583.004 Server - T1584.004 Software - T1592.002 Rootkit - T1014 Rundll32 - T1085 Rootkit
Show in Graph
Common Information
Type Value
UUID ac4b5448-c453-4185-8cc2-f2beba49a215
Fingerprint 961a4851253397cd
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 1, 2006, midnight
Added to db Jan. 18, 2023, 11:53 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline What next? Trojan.Linkoptimizer
Title Virus Bulletin :: What next? Trojan.Linkoptimizer
Detected Hints/Tags/Attributes 88/3/18
Source URLs
Redirection Url
Details Source https://www.virusbulletin.com/virusbulletin/2006/12/what-next-trojan-linkoptimizer
URL Provider
Details Provider Source level domain
Details virusbulletin.com www.virusbulletin.com
Attributes
Details Type #Events CTI Value
Details Domain 2 
gromozon.com
Details Domain 454 
www.google.com
Details Domain 2 
shiptrop.com
Details Domain 2 
wlow.net
Details Domain 2 
notetol.com
Details File 2 
pic.gif
Details File 2 
3e22c2d.exe
Details File 2 
pic2.gif
Details File 2 
hint_js.php
Details File 263 
iexplore.exe
Details File 3 
uninstall.php
Details File 1122 
svchost.exe
Details File 2 
hxlga.rb
Details Url 2 
http://notetol.com/uninstall.php
Details Windows Registry Key 1 
HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Windows\AppInit_DLLs
Details Windows Registry Key 38 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Details Windows Registry Key 7 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Details Windows Registry Key 19 
HKLM\SYSTEM\CurrentControlSet\Control\Session