Troj/VBNA-BK

Kategorie: Viren und Spyware Schutz verfügbar seit:22 Jun 2013 03:56:11 (GMT)
Typ: Trojan Zuletzt aktualisiert:22 Jun 2013 03:56:11 (GMT)
Verbreitung:

Download Kostenloses Virus Removal Tool downloaden – Finden Sie Bedrohungen, die Ihre Virenschutzsoftware übersehen hat

Examples of Troj/VBNA-BK include:

Example 1

File Information

Size
81K
SHA-1
1d5dd583450f033ce794ebf628ac379a0843387a
MD5
e57827c04c0c4784229eab51c115c976
CRC-32
823ec9f0
File type
Windows executable
First seen
2013-06-21

Other vendor detection

Avira
TR/Crypt.XPACK.Gen

Runtime Analysis

Registry Keys Created
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    xoeuxu
    c:\Documents and Settings\test user\xoeuxu.exe /w
  • HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    NoAutoUpdate
    0x00000001
Registry Keys Modified
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    ShowSuperHidden
    0x00000000
DNS Requests
  • ns1.anytime1.com
  • ns1.anytime1.net
  • ns1.anytime1.org
  • ns1.anytime2.com
  • ns1.anytime2.net
  • ns1.anytime2.org
  • ns1.anytime3.net
  • ns1.anytime3.org
  • ns1.anytime4.com

Example 2

File Information

Size
81K
SHA-1
afa28f041d6c58b987dedbdabaed6640ab7ab627
MD5
6371f174202ce18abdb8903444baa0e4
CRC-32
437b72f5
File type
Windows executable
First seen
2013-06-21

Other vendor detection

Avira
TR/Crypt.XPACK.Gen

Runtime Analysis

Registry Keys Created
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    ruikaod
    c:\Documents and Settings\test user\ruikaod.exe /k
  • HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    NoAutoUpdate
    0x00000001
Registry Keys Modified
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    ShowSuperHidden
    0x00000000
DNS Requests
  • ns1.anytime1.com
  • ns1.anytime1.net
  • ns1.anytime1.org
  • ns1.anytime2.com
  • ns1.anytime2.net
  • ns1.anytime2.org
  • ns1.anytime3.net
  • ns1.anytime3.org
  • ns1.anytime4.com

Download Sophos Produkte kostenlos testen
Jetzt downloaden