Need help? Ask the community or hire an expert.
Go to Avira Answers
??:Worm/SdBot.34709
????:13/12/2012
??:??
????:?
????????????
??/?????????
?? / ?????????
????:?
????:34.709 ??
MD5 ???:3d6bd481eb390817f5599465dffc7986
VDF ??:7.11.53.216

 ???? ????:
   • ????


??:
   •  Symantec: W32.Randex
   •  TrendMicro: WORM_SDBOT.CKX
   •  Sophos: W32/Sdbot-Fam
   •  Panda: W32/Sdbot.FTB.worm
   •  VirusBuster: Worm.SdBot.BPA
   •  Bitdefender: Backdoor.SDBot.7897B21C


??/????:
   • Windows 95
   • Windows 98
   • Windows 98 SE
   • Windows NT
   • Windows ME
   • Windows 2000
   • Windows XP
   • Windows 2003


???:
   • ?????
   • ?????

 ?? ???????????:
   • %SYSDIR%\richword.exe

 ??? ????????????????????????:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   • "Alleria" = "richword.exe"

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
   • "Alleria" = "richword.exe"

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   • "Alleria" = "richword.exe"

 ???? ?????????????????????????????

??????????????????:
   • IPC$
   • C$\Documents and Settings\All Users\Documents\
   • C$\shared
   • C$\windows\system32
   • c$\winnt\system32
   • ADMIN$\system32\


?????????????????:

????????:
   • oeminstall; staff; teacher; student1; student; afro; turnip; glen;
      freddy; fred; bill; intranet; lan; nokia; ctx; headoffice; main;
      userpassword; capitol; winpass; blank; office; mass; control; pink;
      yellow; siemens; compaq; dell; cisco; sqlpass; sql; db1234; db1;
      databasepassword; data; databasepass; dbpassword; dbpass; access;
      database; domainpassword; domainpass; domain; orange; heaven; fish;
      hell; god; sex; fuck; exchnge; exchange; backup; technical; sage; owa;
      loginpass; login; katie; kate; bruce; barbara; sam; ron; luke; peter;
      john; mike; qwe; zxc; asd; qaz; win2000; winnt; winxp; win2k; win98;
      windows; oemuser; oem; user1; user; homeuser; home; accounting;
      accounts; internet; www; web; default; changeme; none; guest; test;
      007; 121; adm; admin; administrateur; administrator; pass1234;
      password1; pwd; pass; passwd; password


 IRC ????????????????????? IRC ???:

???: comto.my**********
??: 5570
??: #sk
??: %?????????%


 ?????????????:
     ?? DDoS SYN ????
    • ????
    • ????
     ????

 ?? Mutex:
?????? Mutex:
   • swapme

 ?????? ????:
????????? MS Visual C++ ????


???????:
????????????????????????????????:
   • MEW

Beschrijving ingevoegd door Irina Boldea op dinsdag 11 april 2006
Beschrijving bijgewerkt door Irina Boldea op dinsdag 11 april 2006

Terug . . . .
https:// Dit venster is voor uw veiligheid gecodeerd.