Full description

Nume:	BDS/Rabasheeta.A
Descoperit pe data de:	13/10/2012
Tip:	Backdoor Server
ITW:	Nu
Numar infectii raportate:	Mediu spre ridicat
Potential de raspandire:	Scazut
Potential de distrugere:	Mediu
Fisier static:	Da
Marime:	49.664 Bytes
MD5:	746f911c631411f611308eaafb6c353d
Versiune VDF:	7.11.46.12 - 2012年10月13日星期六
Versiune IVDF:	7.11.46.12 - 2012年10月13日星期六

General Metoda de raspandire:
   • Nu are rutina proprie de raspandire

Alias:
   • Mcafee: BackDoor-FIT
   • Kaspersky: Backdoor.MSIL.Agent.gza
   • TrendMicro: BKDR_SYSIE.A
   • Sophos: Mal/Rabashe-A
   • Bitdefender: Trojan.Agent.AXAG
   • Microsoft: Backdoor:Win32/Rabasheeta.A
   • AVG: BackDoor.Agent.ASDF
   • Panda: Bck/Rabasheeta.A
   • Eset: MSIL/Rabasheeta.A
   • DrWeb: BackDoor.Rabasheeta.1
   • Ikarus: Backdoor.Win32.Rabasheeta
   • Norman: W32/Agent.AJQBO

Sistem de operare:
   • Windows 2000
   • Windows XP
   • Windows 2003
   • Windows Vista
   • Windows Server 2008
   • Windows 7

Efecte secundare:
   • Creeaza un fisier malware
   • Modificari in registri
   • Sustrage informatii

Fisiere Se copiaza in urmatoarea locatie:
• %SYSDIR%\iesys.exe

Registrii sistemului Urmatoarea cheie este adaugata in registri pentru a rula procesul la repornirea sistemului:

– [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]
• "D8812EB1"="%SYSDIR%\iesys.exe"

說明撰寫者 Eric Burk 開啟 2012年11月9日星期五
說明更新者 Eric Burk 開啟 2012年11月9日星期五

返回 . . . .

我的帳戶