TROJ_GETCODEC.BO
Publish Date: 08 de октября de 2012
PLATFORM:
Windows 2000, XP, Server 2003
OVER ALL RISK RATING:
DAMAGE POTENTIAL::
DISTRIBUTION POTENTIAL::
REPORTED INFECTION:
Low
Medium
High
Critical
Threat Type:
Trojan
Destructiveness:
No
Encrypted:
No
In the wild::
Yes
TECHNICAL DETAILS
File size: меняется
File type: WMF
Memory resident: No
INITIAL SAMPLES RECEIVED DATE: 10 сентября 2010
PAYLOAD: Connects to URLs/Ips
Rutina de adware
Se conecta a las URL siguientes para descargar y mostrar publicidad:
- http://www.{BLOCKED}r.net/?t=3&embedded=false
- http://www.{BLOCKED}you.com/exit/movies1.html?embedded=false
- http://{BLOCKED}vie-downloading.com/
- http://{BLOCKED}ixhost.biz/rd/redir.php?kw=mp3&embedded=false