Full description

Virus:	TR/Claretore.A.19
Date discovered:	03/05/2012
Type:	Trojan
In the wild:	No
Reported Infections:	Low
Distribution Potential:	Low
Damage Potential:	Low
File size:	37.888 Bytes
MD5 checksum:	5c37cff044ca6251fec1a3dd38a4e2dd
VDF version:	7.11.29.32 - Thursday, May 3, 2012
IVDF version:	7.11.29.32 - Thursday, May 3, 2012

General Method of propagation:
   • No own spreading routine

Aliases:
   • Mcafee: Generic
   • Kaspersky: Trojan-Dropper.Win32.Demp.emq
   • Bitdefender: Trojan.Generic.KDV.612416
   • Grisoft: Dropper.Generic6.BYT
   • Eset: Win32/Simda.E trojan
   • GData: Trojan.Generic.KDV.612416
   • DrWeb: Trojan.Inject.63254
   • Norman: Trojan W32/Suspicious_Gen4.ADVZC

Platforms / OS:
   • Windows 2000
   • Windows XP
   • Windows 2003
   • Windows Vista
   • Windows Server 2008
   • Windows 7

Side effects:
   • Can be used to execute malicious code
   • Registry modification

Miscellaneous Event handler:
It creates the following Event handlers:
   • WinHttpQueryDataAvailable
   • CreateToolhelp32Snapshot
   • WinHttpReceiveResponse
   • CreateFileMappingW
   • WriteProcessMemory
   • WinHttpOpenRequest
   • WinHttpCloseHandle
   • WinHttpSendRequest
   • WinHttpConnect
   • WinHttpOpen
   • WriteProcessMemory
   • CopyFile
   • CreateFile

String:
Furthermore it contains the following strings:
   • 217.23.15.125/chrome/report.html
   • GET %s HTTP/1.%*d
   • USERPROFILE%

說明撰寫者 Wensin Lee 開啟 2012年5月9日星期三
說明更新者 Wensin Lee 開啟 2012年5月9日星期三

返回 . . . .

需要修復電腦？

我的帳戶