Virus: TR/OnlineG.118269.B Date discovered: 09/12/2008 Type: Trojan In the wild: Yes Reported Infections: Low to medium Distribution Potential: Low to medium Damage Potential: Low to medium Static file: Yes File size: 118.269 Bytes MD5 checksum: 5979a4c8cc92f4a074b97be89539b927 IVDF version: 7.01.00.208 - Tuesday, December 9, 2008
General Method of propagation: Aliases: Platforms / OS: Side effects: Files %SYSDIR% \amvo.exe%drive% \00hoeav.com%SYSDIR% \drivers\vga.sys %drive% \autorun.inf This is a non malicious text file with the following content:%code that runs malware% %SYSDIR% \amvo0.dll Further investigation pointed out that this file is malware, too. Detected as: TR/Vundo.Gen %SYSDIR% \optyhww0.dll Further investigation pointed out that this file is malware, too. Detected as: TR/Crypt.XPACK.Gen %TEMPDIR% \ker1.tmp Further investigation pointed out that this file is malware, too. Detected as: TR/Drop.OnLi.123904 %TEMPDIR% \azqy.dll Further investigation pointed out that this file is malware, too. Detected as: TR/Crypt.ZPACK.Gen %SYSDIR% \urretnd.exe Further investigation pointed out that this file is malware, too. Detected as: TR/Drop.Agent.ahdz %drive% \d1vmq.exe Further investigation pointed out that this file is malware, too. Detected as: TR/Drop.Agent.ahdz Registry %SYSDIR% \amvo.exe"%SYSDIR% \urretnd.exe" File details Runtime packer:
Description inserted by Petre Galan on Tuesday, November 24, 2009
Back
.
.
.
.
