Need help? Ask the community or hire an expert.
Go to Avira Answers
??:Worm/Stration.1
????:13/12/2012
??:??
????:?
????????????
??/?????????
?? / ????????????
????:?
????:89.829 ??
MD5 ???:029c3f07c57a67df871153701abbe23d
VDF ??:7.11.53.216 - donderdag 13 december 2012
IVDF ??:7.11.53.216 - donderdag 13 december 2012

 ???? ????:
   • ????


??:
   •  Kaspersky: Email-Worm.Win32.Warezov.h
   •  TrendMicro: WORM_STRATION.BR
   •  Eset: Win32/Stration.T


??/????:
   • Windows 95
   • Windows 98
   • Windows 98 SE
   • Windows NT
   • Windows ME
   • Windows 2000
   • Windows XP
   • Windows 2003


???:
   • ??????
   • ??????
   • ???????????
   • ?????


?????????????:


 ?? ???????????:
   • %WINDIR%\rsmb.exe



??????:

– ??????????????:
   • %WINDIR%\rsmb.wax

%WINDIR%\rsmb.gfx
%????????%\%?????????%.tmp
%WINDIR%\rsmb.dll ??????? ???: WORM/Stration.5




????????:

???????:
   • gadesunheranwui.com/chr/zjjk/**********
???????????????????

 ??? ????????????????????????:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   • "rsmb"="%WINDIR%\rsmb.exe s"

 ???? ?????? SMTP ???????????? ?????????????? ?????????:


???:
?????????


???:
– ????????????????????
 ? WAB (Windows ???) ??????????


??:
??????:
   • Error
   • picture
   • Status
   • Good day
   • Mail Delivery System
   • Mail Transaction Failed



??:
??????????????:
   • The message contains Unicode characters and has been sentas a binary attachment.
   • The message cannot be represented in 7-bit ASCII encodingand has been sent as a binary attachment
   • Mail transaction failed. Partial message is available.


??:
????????????:

–  ??????????:
   • test
   • file
   • doc
   • document
   • message

    ??????????:
   • dat
   • log
   • msg
   • txt

    ?????????????:
   • exe
   • cmd
   • pif

??????????????



????????:


 ?? ????:
????????????????:
   • xml; xls; wsh; wab; uin; txt; tbb; stm; shtm; sht; php; oft; ods; nch;
      msg; mmf; mht; mdx; mbx; jsp; html; htm; eml; dhtm; dbx; cgi; cfg;
      asp; adb

 ?????? ????:
????????? MS Visual C++ ????


???????:
????????????????????????????????:
   • MEW

Beschrijving ingevoegd door Irina Boldea op donderdag 23 november 2006
Beschrijving bijgewerkt door Irina Boldea op donderdag 23 november 2006

Terug . . . .
https:// Dit venster is voor uw veiligheid gecodeerd.