Sunday, June 14, 2015

Bot-FKS Virus Information

Virus Depiction:

it is a Trojan vicinity. Assorted to infections, Trojans do not self-duplicate. They are spread physically, almost always below the reason that they are priceless or needed. The most famous establishment strategies comprise framework or security misuse, and clueless purchasers bodily executing obscure initiatives. Dissemination channels contain e-mail, vindictive or hacked website pages, web transfer talk (IRC), shared programs, etc.

Which File infected:

report motion

Duplicates itself to %Appdata%malware.Exe (the place malware.Exe is an irregular file title)

Registry changes

The accompanying Registry keys are integrated request to run the bot at framework startup:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current\Version\Run "Malware.Exe" = %AppDatap.CMalware.Exe

system

Bunches of irregular TCP ports being opened

contamination method:

Infected method:

Trojans do not self-reproduce. They're unfold physically, customarily beneath the motive that the executable is something invaluable. Appropriation channels comprise IRC, allotted programs, newsgroup postings, email, and so forth.

No comments:

Post a Comment