Full description

Nume:	ADWARE/Eorezo.AJ
Descoperit pe data de:	05/11/2012
Tip:	Adware/Spyware
ITW:	Nu
Numar infectii raportate:	Scazut spre mediu
Potential de raspandire:	Scazut
Potential de distrugere:	Scazut
Versiune VDF:	7.11.48.222 - maandag 5 november 2012
Versiune IVDF:	7.11.48.222 - maandag 5 november 2012

General Metoda de raspandire:
   • Nu are rutina proprie de raspandire

Alias:
   • Bitdefender: Adware.Eorezo.AJ
   • Eset: a variant of Win32/Adware.EoRezo.AJ application
   • Norman: W32/EoRezo.CDO

Sistem de operare:
   • Windows 2000
   • Windows XP
   • Windows 2003
   • Windows Vista
   • Windows Server 2008
   • Windows 7

Fisiere Sunt create fisierele:

– Fisiere inofensive:
   • %appdata%\tutoriales100_co_1\tutoriales100_co_1\update.cyl
   • %appdata%\tutoriales100_co_1\tutoriales100_co_1\0.99.5\conf.cyl
   • %temp%\mfi1.tmp
   • %temp%\gch2.tmp
   • %temp%\mfi3.tmp
   • %temp%\gch4.tmp

– Fisiere temporare care pot fi sterse dupa aceea:
   • %temp%\mfi3.tmp-shm
   • %temp%\mfi3.tmp-wal

Alte informatii Event handler:
Creeaza urmatoarele Event handlere:
   • SetWindowsHook
   • GetKeyState
   • GetAsynckeyState
   • CopyFile
   • CreateProcess
   • CreateFile
   • GetDriveType
   • Process32First
   • FindWindows
   • CreateToolhelp32Snapshot

Sir de caractere:
In plus, mai contine urmatoarele siruri de caractere:
   • multipart/
   • MAIL FROM:
   • RCPT TO:
   • HELO
   • USER
   • PASS
   • LIST
   • TYPE
   • SYST
   • REST
   • PASV
   • PORT
   • RETR
   • CONNECT
   • NOTICE
   • APRT
   • JOIN
   • MODE
   • QUIT
   • MozillaWindowClass

Description inserted by Wensin Lee on woensdag 7 november 2012
Description updated by Wensin Lee on woensdag 7 november 2012

Terug . . . .

Mijn Account