Need help? Ask the community or hire an expert.
Go to Avira Answers
??:TR/Kazy.19967.93
????:13/12/2012
??:?????
????:?
????????????????
??/????????
?? / ????????????
????:?
????:165.376 ??
MD5 ???:08120d644f58ca9c67f915479cc28209
VDF ??:7.11.53.216 - 13 Aralık 2012 Perşembe
IVDF ??:7.11.53.216 - 13 Aralık 2012 Perşembe

 ???? ??:
   •  Kaspersky: Backdoor.Win32.Gbot.ebg
   •  F-Secure: Trojan.Downloader.JOIC
   •  Bitdefender: Trojan.Downloader.JOIC
     GData: Trojan.Downloader.JOIC
     DrWeb: Trojan.DownLoader2.39361


??/????:
   • Windows 2000
   • Windows XP
   • Windows 2003


???:
   • ??????
   • ?????
   • ??????
CVE-2007-1204
MS07-019

 ?? ???????????:
   • %HOME%\Application Data\Microsoft\conhost.exe



??????:

%HOME%\Application Data\01E2.543

 ??? ????????????????????????:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   • "conhost"="%HOME%\Application Data\Microsoft\conhost.exe"



???????????? Windows XP ???:

[HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\
   FirewallPolicy\StandardProfile]
   • "EnableFirewall"=dword:0x00000000

 ??  ??????????? Internet ??:
   • http://www.google.com
?? Internet ???
   • http://onlinedatingsecretfriends.com/images/**********?v93=%??%&tq=%???%
   • http://zonedg.com/**********?tq=%???%
   • http://wapmobilesoftonline.com/blog/images/**********?v91=%??%&tq=%???%
   • http://videosamplestore.com/blog/images/**********?v46=%??%&tq=%???%
   • http://xprstats.com/images/**********?tq=%???%
   • http://122343234.motostyleclub.com/blog/images/**********?v49=%??%&tq=%???%
   • http://newworlddisordervideo.com/blog/images/**********?v24=%??%&tq=%???%
   • http://onlinebizdirectory.com/images/**********?v24=%??%&tq=%???%


Mutex:
?????? Mutex:
   • {B16C7E24-B3B8-4962-BF5E-4B33FD2DFE78}
   • {A5B35993-9674-43cd-8AC7-5BC5013E617B}
   • {B5B35993-9674-43cd-8AC7-5BC5013E617B}
   • {B37C48AF-B05C-4520-8B38-2FE181D5DC78}
   • {C66E79CE-8935-4ed9-A6B1-4983619CB925}
   • {61B98B86-5F44-42b3-BCA1-33904B067B81}

 ?????? ????:
????????? MS Visual C++ ????


???????:
???????????????????????????????

Açıklamayı yerleştiren Petre Galan tarihinde 30 Haziran 2011 Perşembe
Açıklamayı güncelleyen: Petre Galan tarihinde 30 Haziran 2011 Perşembe

Geri . . . .
https:// Bu pencere güvenlik amacıyla şifrelenmiştir.