Full description

Virus:	TR/Tapaoux.B.5
Date discovered:	15/11/2011
Type:	Trojan
In the wild:	No
Reported Infections:	Low
Distribution Potential:	Low
Damage Potential:	Low to medium
Static file:	Yes
File size:	207.272 Bytes
MD5 checksum:	3b4fed7138ebdc54d9cf6c7718088557
VDF version:	7.11.17.165 - Tuesday, November 15, 2011
IVDF version:	7.11.17.165 - Tuesday, November 15, 2011

General Method of propagation:
   • No own spreading routine

Alias:
   • Microsoft: Trojan:Win32/Tapaoux.B

Platforms / OS:
   • Windows 2000
   • Windows XP
   • Windows 2003
   • Windows Vista
   • Windows Server 2008
   • Windows 7

Side effects:
   • Drops files
   • Drops malicious files
   • Registry modification

Files The following files are created:

– Non malicious files:
• %SYSDIR%\btsettoor.bin
• %SYSDIR%\up0707012804R.tmp

– %SYSDIR%\dtsettoor.dll
– %SYSDIR%\roottest.exe

Registry The following registry key is added:

– [HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\
{78AF3E29-AF90-F01E-B9E3-93AE09658EC1}]
• "StubPath"=""%SYSDIR%\roottest.exe" NetSpoolPtr"

File details Programming language:
The malware program was written in MS Visual C++.

說明撰寫者 Eric Burk 開啟 2011年11月15日星期二
說明更新者 Eric Burk 開啟 2011年11月15日星期二

返回 . . . .

我的帳戶