需要修复电脑?
聘请专家
Virus:DR/Dldr.VB.VYP
Date discovered:11/12/2008
Type:Dropper
In the wild:Yes
Reported Infections:Low
Distribution Potential:Low
Damage Potential:Low to medium
Static file:Yes
File size:102.912 Bytes
MD5 checksum:4458edeed674cd4665a10Cdeebbc1004
IVDF version:7.01.00.219 - Thursday, December 11, 2008

 General Method of propagation:
   • No own spreading routine


Aliases:
   •  Kaspersky: Trojan-Downloader.Win32.Small.aiat
   •  F-Secure: Trojan-Downloader.Win32.Small.aiat


Platforms / OS:
   • Windows 95
   • Windows 98
   • Windows 98 SE
   • Windows NT
   • Windows ME
   • Windows 2000
   • Windows XP
   • Windows 2003


Side effects:
   • Drops a file
   • Drops a malicious file


Right after execution the following information is displayed:


 Files The following files are created:

%TEMPDIR%\RWNHGBQM.exe Furthermore it gets executed after it was fully created.
%TEMPDIR%\IFCQNC~1.EXE Furthermore it gets executed after it was fully created. Further investigation pointed out that this file is malware, too. Detected as: TR/Dldr.VB.FSW

说明添加者: Andrei Gherman 打开 2009年1月8日星期四
说明更新者: Andrei Gherman 打开 2009年1月8日星期四

反馈 . . . .
https:// 为了你的安全,此窗口已加密。