Full description

Virus:	RKit/Agent.devt.1
Date discovered:	31/07/2012
Type:	Trojan
In the wild:	No
Reported Infections:	Medium
Distribution Potential:	Low
Damage Potential:	Low
File size:	6400 Bytes
MD5 checksum:	6c0c4c5e22cbd6229ebe0d3226d6089f
VDF version:	7.11.38.54 - Tuesday, July 31, 2012
IVDF version:	7.11.38.54 - Tuesday, July 31, 2012

General Method of propagation:
   • No own spreading routine

Alias:
   • Kaspersky: Rootkit.Win32.Agent.devt

Platforms / OS:
   • Windows 2000
   • Windows XP
   • Windows 2003
   • Windows Vista
   • Windows Server 2008
   • Windows 7

Side effects:
   • Can be used to modify system settings that allow or augment potential malware behaviour.

Miscellaneous Event handler:
It creates the following Event handlers:
   • GetModuleFileName
   • GetModuleHandle
   • CallNextHookEx
   • VirtualProtect

String:
Furthermore it contains the following string:
   • adllgrd.dll

說明撰寫者 Wensin Lee 開啟 2012年8月1日星期三
說明更新者 Wensin Lee 開啟 2012年8月1日星期三

返回 . . . .

我的帳戶