Full description

Virus:	Adware/EoRezo.G
Date discovered:	27/08/2012
Type:	Adware/Spyware
In the wild:	No
Reported Infections:	Low to medium
Distribution Potential:	Low
Damage Potential:	Low
VDF version:	7.11.41.12 - Monday, August 27, 2012
IVDF version:	7.11.41.12 - Monday, August 27, 2012

General Method of propagation:
   • No own spreading routine

Aliases:
   • Eset: a variant of Win32/Adware.EoRezo.AC application
   • Norman: Aggressive commersial W32/EoRezo.BTE

Platforms / OS:
   • Windows 2000
   • Windows XP
   • Windows 2003
   • Windows Vista
   • Windows Server 2008
   • Windows 7

Files The following files are created:

– Non malicious files:
   • %temp%\mfi3.tmp
   • %temp%\gch4.tmp
   • %temp%\mfi5.tmp
   • %temp%\gch6.tmp
   • %appdata%\tuto4pc_ph_1\tuto4pc_ph_1\update.cyl
   • %appdata%\tuto4pc_ph_1\tuto4pc_ph_1\0.99\conf.cyl

Miscellaneous Checks for an internet connection by contacting the following web sites:
   • upd.**********00001.com
   • com.sucom**********.com

String:
Furthermore it contains the following strings:
   • MAIL FROM:
   • RCPT TO:
   • HELO
   • USER
   • PASS
   • LIST
   • TYPE
   • SYST
   • REST
   • PASV
   • PORT
   • RETR
   • CopyFile
   • CreateProcess
   • CreateFile
   • GetDriveType
   • MozillaWindowClass
   • CONNECT
   • NOTICE
   • PART
   • JOIN
   • MODE
   • JOIN
   • PASS
   • USER
   • QUIT

说明添加者： Wensin Lee 打开 2012年8月29日星期三
说明更新者： Wensin Lee 打开 2012年8月29日星期三

反馈 . . . .

我的帐户