Nume: TR/Rkit.Bagle.GL Descoperit pe data de: 30/06/2006 Tip: Troian ITW: Da Numar infectii raportate: Scazut Potential de raspandire: Scazut Potential de distrugere: Scazut spre mediu Fisier static: Da Marime: 38.912 Bytes MD5: 4d985cc3b434828088f380225d118fca Versiune VDF: 6.35.00.98 Versiune IVDF: 6.35.00.124 - jueves 6 de julio de 2006
General Metoda de raspandire: Alias: Sistem de operare: Efecte secundare: Fisiere %directorul curent% \kavsvc.exe%directorul curent% \bdmcon.exe%directorul curent% \vsserv.exe%directorul curent% \bdnews.exe%directorul curent% \livesrv.exe%directorul curent% \mcupdate.exe%directorul curent% \frameworkservice.exe%directorul curent% \upgrader.exe%directorul curent% \apvxdwin.exe%directorul curent% \LuComServer_2_5.EXE%directorul curent% \lucomserver_2_6.exe%directorul curent% \drwebupw.exe%directorul curent% \nod32krn.exe%directorul curent% \a2guard.exe%directorul curent% \aavshield.exe%directorul curent% \AckWin32.exe%directorul curent% \ADVCHK.EXE%directorul curent% \AhnSD.exe%directorul curent% \airdefense.exe%directorul curent% \ALERTSVC.EXE%directorul curent% \ALMon.exe%directorul curent% \ALOGSERV.EXE%directorul curent% \ALsvc.exe%directorul curent% \amon.exe%directorul curent% \Anti-Trojan.exe%directorul curent% \AntiVirScheduler%directorul curent% \AntiVirService%directorul curent% \ANTS.EXE%directorul curent% \APVXDWIN.EXE%directorul curent% \Armor2net.exe%directorul curent% \ashAvast.exe%directorul curent% \ashDisp.exe%directorul curent% \ashEnhcd.exe%directorul curent% \ashMaiSv.exe%directorul curent% \ashPopWz.exe%directorul curent% \ashServ.exe%directorul curent% \ashSimpl.exe%directorul curent% \ashSkPck.exe%directorul curent% \ashWebSv.exe%directorul curent% \aswUpdSv.exe%directorul curent% \ATCON.EXE%directorul curent% \ATUPDATER.EXE%directorul curent% \ATWATCH.EXE%directorul curent% \AUPDATE.EXE%directorul curent% \AUTODOWN.EXE%directorul curent% \AUTOTRACE.EXE%directorul curent% \AUTOUPDATE.EXE%directorul curent% \avciman.exe%directorul curent% \Avconsol.exe%directorul curent% \AVENGINE.EXE%directorul curent% \avgamsvr.exe%directorul curent% \avgcc.exe%directorul curent% \AVGCC32.EXE%directorul curent% \AVGCTRL.EXE%directorul curent% \avgemc.exe%directorul curent% \avgfwsrv.exe%directorul curent% \AVGNT.EXE%directorul curent% \avgntdd%directorul curent% \avgntmgr%directorul curent% \AVGSERV.EXE%directorul curent% \AVGUARD.EXE%directorul curent% \avgupsvc.exe%directorul curent% \avinitnt.exe%directorul curent% \AvkServ.exe%directorul curent% \AVKService.exe%directorul curent% \AVKWCtl.exe%directorul curent% \AVP.EXE%directorul curent% \AVP32.EXE%directorul curent% \avpcc.exe%directorul curent% \avpm.exe%directorul curent% \AVPUPD.EXE%directorul curent% \AVSCHED32.EXE%directorul curent% \avsynmgr.exe%directorul curent% \AVWUPD32.EXE%directorul curent% \AVWUPSRV.EXE%directorul curent% \AVXMONITOR9X.EXE%directorul curent% \AVXMONITORNT.EXE%directorul curent% \AVXQUAR.EXE%directorul curent% \BackWeb-4476822.exe%directorul curent% \bdmcon.exe%directorul curent% \bdss.exe%directorul curent% \bdsubmit.exe%directorul curent% \bdswitch.exe%directorul curent% \blackd.exe%directorul curent% \blackice.exe%directorul curent% \cafix.exe%directorul curent% \ccApp.exe%directorul curent% \ccEvtMgr.exe%directorul curent% \ccProxy.exe%directorul curent% \ccSetMgr.exe%directorul curent% \CFIAUDIT.EXE%directorul curent% \ClamTray.exe%directorul curent% \ClamWin.exe%directorul curent% \Claw95.exe%directorul curent% \Claw95cf.exe%directorul curent% \cleaner.exe%directorul curent% \cleaner3.exe%directorul curent% \CliSvc.exe%directorul curent% \CMGrdian.exe%directorul curent% \cpd.exe%directorul curent% \DefWatch.exe%directorul curent% \DOORS.EXE%directorul curent% \DrVirus.exe%directorul curent% \drwadins.exe%directorul curent% \drweb32w.exe%directorul curent% \drwebscd.exe%directorul curent% \DRWEBUPW.EXE%directorul curent% \ESCANH95.EXE%directorul curent% \ESCANHNT.EXE%directorul curent% \ewidoctrl.exe%directorul curent% \EzAntivirusRegistrationCheck.exe%directorul curent% \F-AGNT95.EXE%directorul curent% \F-PROT95.EXE%directorul curent% \F-Sched.exe%directorul curent% \F-StopW.EXE%directorul curent% \FAMEH32.EXE%directorul curent% \FAST.EXE%directorul curent% \FCH32.EXE%directorul curent% \FireSvc.exe%directorul curent% \FireTray.exe%directorul curent% \FIREWALL.EXE%directorul curent% \fpavupdm.exe%directorul curent% \freshclam.exe%directorul curent% \FRW.EXE%directorul curent% \fsav32.exe%directorul curent% \fsavgui.exe%directorul curent% \fsbwsys.exe%directorul curent% \fsdfwd.exe%directorul curent% \FSGK32.EXE%directorul curent% \fsgk32st.exe%directorul curent% \fsguiexe.exe%directorul curent% \FSM32.EXE%directorul curent% \FSMA32.EXE%directorul curent% \FSMB32.EXE%directorul curent% \fspex.exe%directorul curent% \fssm32.exe%directorul curent% \gcasDtServ.exe%directorul curent% \gcasServ.exe%directorul curent% \GIANTAntiSpywareMain.exe%directorul curent% \GIANTAntiSpywareUpdater.exe%directorul curent% \GUARD.EXE%directorul curent% \GUARDGUI.EXE%directorul curent% \GuardNT.exe%directorul curent% \HRegMon.exe%directorul curent% \Hrres.exe%directorul curent% \HSockPE.exe%directorul curent% \HUpdate.EXE%directorul curent% \iamapp.exe%directorul curent% \iamserv.exe%directorul curent% \ICLOAD95.EXE%directorul curent% \ICLOADNT.EXE%directorul curent% \ICMON.EXE%directorul curent% \ICSSUPPNT.EXE%directorul curent% \ICSUPP95.EXE%directorul curent% \ICSUPPNT.EXE%directorul curent% \IFACE.EXE%directorul curent% \INETUPD.EXE%directorul curent% \InocIT.exe%directorul curent% \InoRpc.exe%directorul curent% \InoRT.exe%directorul curent% \InoTask.exe%directorul curent% \InoUpTNG.exe%directorul curent% \IOMON98.EXE%directorul curent% \isafe.exe%directorul curent% \ISATRAY.EXE%directorul curent% \ISRV95.EXE%directorul curent% \ISSVC.exe%directorul curent% \JEDI.EXE%directorul curent% \KAV.exe%directorul curent% \kavmm.exe%directorul curent% \KAVPF.exe%directorul curent% \KavPFW.exe%directorul curent% \KAVStart.exe%directorul curent% \KAVSvc.exe%directorul curent% \KAVSvcUI.EXE%directorul curent% \KMailMon.EXE%directorul curent% \KPfwSvc.EXE%directorul curent% \KWatch.EXE%directorul curent% \livesrv.exe%directorul curent% \LOCKDOWN2000.EXE%directorul curent% \LogWatNT.exe%directorul curent% \lpfw.exe%directorul curent% \LUALL.EXE%directorul curent% \LUCOMSERVER.EXE%directorul curent% \Luupdate.exe%directorul curent% \MCAGENT.EXE%directorul curent% \mcmnhdlr.exe%directorul curent% \mcregwiz.exe%directorul curent% \Mcshield.exe%directorul curent% \MCUPDATE.EXE%directorul curent% \mcvsshld.exe%directorul curent% \MINILOG.EXE%directorul curent% \MONITOR.EXE%directorul curent% \MonSysNT.exe%directorul curent% \MOOLIVE.EXE%directorul curent% \MpEng.exe%directorul curent% \mpssvc.exe%directorul curent% \MSMPSVC.exe%directorul curent% \myAgtSvc.exe%directorul curent% \myagttry.exe%directorul curent% \navapsvc.exe%directorul curent% \NAVAPW32.EXE%directorul curent% \NavLu32.exe%directorul curent% \NAVW32.EXE%directorul curent% \NDD32.EXE%directorul curent% \NeoWatchLog.exe%directorul curent% \NeoWatchTray.exe%directorul curent% \NISSERV%directorul curent% \NISUM.EXE%directorul curent% \NMAIN.EXE%directorul curent% \nod32.exe%directorul curent% \nod32krn.exe%directorul curent% \nod32kui.exe%directorul curent% \NORMIST.EXE%directorul curent% \notstart.exe%directorul curent% \npavtray.exe%directorul curent% \NPFMNTOR.EXE%directorul curent% \npfmsg.exe%directorul curent% \NPROTECT.EXE%directorul curent% \NSCHED32.EXE%directorul curent% \NSMdtr.exe%directorul curent% \NssServ.exe%directorul curent% \NssTray.exe%directorul curent% \ntrtscan.exe%directorul curent% \NTXconfig.exe%directorul curent% \NUPGRADE.EXE%directorul curent% \NVC95.EXE%directorul curent% \Nvcod.exe%directorul curent% \Nvcte.exe%directorul curent% \Nvcut.exe%directorul curent% \NWService.exe%directorul curent% \OfcPfwSvc.exe%directorul curent% \OUTPOST.EXE%directorul curent% \PAV.EXE%directorul curent% \PavFires.exe%directorul curent% \PavFnSvr.exe%directorul curent% \Pavkre.exe%directorul curent% \PavProt.exe%directorul curent% \pavProxy.exe%directorul curent% \pavprsrv.exe%directorul curent% \pavsrv51.exe%directorul curent% \PAVSS.EXE%directorul curent% \pccguide.exe%directorul curent% \PCCIOMON.EXE%directorul curent% \pccntmon.exe%directorul curent% \PCCPFW.exe%directorul curent% \PcCtlCom.exe%directorul curent% \PCTAV.exe%directorul curent% \PERSFW.EXE%directorul curent% \pertsk.exe%directorul curent% \PERVAC.EXE%directorul curent% \PNMSRV.EXE%directorul curent% \POP3TRAP.EXE%directorul curent% \POPROXY.EXE%directorul curent% \prevsrv.exe%directorul curent% \PsImSvc.exe%directorul curent% \QHM32.EXE%directorul curent% \QHONLINE.EXE%directorul curent% \QHONSVC.EXE%directorul curent% \QHPF.EXE%directorul curent% \qhwscsvc.exe%directorul curent% \RavMon.exe%directorul curent% \RavTimer.exe%directorul curent% \Realmon.exe%directorul curent% \REALMON95.EXE%directorul curent% \Rescue.exe%directorul curent% \rfwmain.exe%directorul curent% \Rtvscan.exe%directorul curent% \RTVSCN95.EXE%directorul curent% \RuLaunch.exe%directorul curent% \SAVAdminService.exe%directorul curent% \SAVMain.exe%directorul curent% \savprogress.exe%directorul curent% \SAVScan.exe%directorul curent% \SCAN32.EXE%directorul curent% \ScanningProcess.exe%directorul curent% \sched.exe%directorul curent% \sdhelp.exe%directorul curent% \SERVIC~1.EXE%directorul curent% \SHSTAT.EXE%directorul curent% \SiteCli.exe%directorul curent% \smc.exe%directorul curent% \SNDSrvc.exe%directorul curent% \SPBBCSvc.exe%directorul curent% \SPHINX.EXE%directorul curent% \spiderml.exe%directorul curent% \spidernt.exe%directorul curent% \Spiderui.exe%directorul curent% \SpybotSD.exe%directorul curent% \SPYXX.EXE%directorul curent% \SS3EDIT.EXE%directorul curent% \stopsignav.exe%directorul curent% \swAgent.exe%directorul curent% \swdoctor.exe%directorul curent% \SWNETSUP.EXE%directorul curent% \symlcsvc.exe%directorul curent% \SymProxySvc.exe%directorul curent% \SymSPort.exe%directorul curent% \SymWSC.exe%directorul curent% \SYNMGR.EXE%directorul curent% \TAUMON.EXE%directorul curent% \TBMon.exe%directorul curent% \TC.EXE%directorul curent% \tca.exe%directorul curent% \TCM.EXE%directorul curent% \TDS-3.EXE%directorul curent% \TeaTimer.exe%directorul curent% \TFAK.EXE%directorul curent% \THAV.EXE%directorul curent% \THSM.EXE%directorul curent% \Tmas.exe%directorul curent% \tmlisten.exe%directorul curent% \Tmntsrv.exe%directorul curent% \TmPfw.exe%directorul curent% \tmproxy.exe%directorul curent% \TNBUtil.exe%directorul curent% \TRJSCAN.EXE%directorul curent% \Up2Date.exe%directorul curent% \UPDATE.EXE%directorul curent% \UpdaterUI.exe%directorul curent% \upgrepl.exe%directorul curent% \Vba32ECM.exe%directorul curent% \Vba32ifs.exe%directorul curent% \vba32ldr.exe%directorul curent% \Vba32PP3.exe%directorul curent% \VBSNTW.exe%directorul curent% \vchk.exe%directorul curent% \vcrmon.exe%directorul curent% \vrmonsvc.exe%directorul curent% \vrrw32.exe%directorul curent% \VSECOMR.EXE%directorul curent% \Vshwin32.exe%directorul curent% \vsmon.exe%directorul curent% \vsserv.exe%directorul curent% \VsStat.exe%directorul curent% \WATCHDOG.EXE%directorul curent% \WebProxy.exe%directorul curent% \Webscanx.exe%directorul curent% \VetTray.exe%directorul curent% \VirusKeeper.exe%directorul curent% \VPTRAY.EXE%directorul curent% \vrfwsvc.exe%directorul curent% \VRMONNT.EXE%directorul curent% \hidn1.exe%directorul curent% \hidn1.exe%directorul curent% \WEBTRAP.EXE%directorul curent% \WGFE95.EXE%directorul curent% \Winaw32.exe%directorul curent% \winroute.exe%directorul curent% \winss.exe%directorul curent% \winssnotify.exe%directorul curent% \WRADMIN.EXE%directorul curent% \WRCTRL.EXE%directorul curent% \xcommsvr.exe%directorul curent% \zatutor.exe%directorul curent% \ZAUINST.EXE%directorul curent% \zlclient.exe%directorul curent% \zonealarm.exe%directorul curent% \_AVP32.EXE%directorul curent% \_AVPCC.EXE%directorul curent% \_AVPM.EXE%directorul curent% \bdoesrv.exe%directorul curent% \bdnews.exe%directorul curent% \hidn.exe%directorul curent% \hidn1.exe Terminarea proceselor Tehnologie Rootkit Ascunde urmatoarele: Metoda folosita:
Descripción insertada por Adriana Popa el lunes 4 de diciembre de 2006
Volver
.
.
.
.
