翻訳と辞書
Words near each other
・ Vulvoz
・ Vum
・ Vuma FM
・ Vumbi
・ Vumbu language
・ VUMC
・ Vume
・ Vuna Takitakimālohi
・ Vunakanau
・ Vunakanau Airfield
・ Vunakapeake
・ Vunapu language
・ Vund Point
・ Vundavilli
・ Vundela Malakonda Reddy
Vundo
・ Vundu
・ Vundwe Island
・ Vuneny
・ Vung Tau Airport
・ Vunga Lilo
・ Vungu
・ Vunibelebele River
・ Vunidawa River
・ Vunikavikaloa
・ Vunipola
・ Vunisea Airport
・ Vunivalu of Bau
・ Vunivia River
・ Vuniyaro River


Dictionary Lists
翻訳と辞書 辞書検索 [ 開発暫定版 ]
スポンサード リンク

Vundo : ウィキペディア英語版
Vundo

The Vundo Trojan (commonly known as Vundo, Virtumonde or Virtumondo, and sometimes referred to as MS Juan) is either a Trojan horse or a computer worm that is known to cause popups and advertising for rogue antispyware programs, and sporadically other misbehavior including performance degradation and denial of service with some websites including Google and Facebook. It also is used to deliver other malware to its host computers.〔
〕 Later versions include rootkits and ransomware.〔
==Infection==
A Vundo infection is typically caused either by opening an e-mail attachment carrying the trojan, or through a variety of browser exploits, including vulnerabilities in popular browser plug-ins, such as Java. Many of the popups advertise fraudulent programs such as AntiSpywareMaster, WinFixer, and AntiVirus 2009.
Virtumonde.dll consists of two main components, Browser Helper Objects and Class ID. Each of these components is in the Windows Registry under HKEY LOCAL MACHINE, and the file names are dynamic. It attaches to the system using bogus Browser Helper Objects and DLL files attached to winlogon.exe, explorer.exe and more recently, lsass.exe.
Vundo inserts registry entries to suppress Windows warnings about the disabling of firewall, antivirus, and the Automatic Updates service, disables the Automatic Updates service and quickly re-disables it if manually re-enabled, and attacks Malwarebytes' Anti-Malware, Spybot Search & Destroy, Lavasoft Ad-Aware, HijackThis, and several other malware removal tools. It frequently hides itself from Vundofix & Combofix. Rather than pushing fake antivirus products, the new "ad" popups for the drive by download attacks are copies of ads by major corporations, faked so that simply closing them allows the drive-by download exploit to insert the payload into the user's computer.

抄文引用元・出典: フリー百科事典『 ウィキペディア(Wikipedia)
ウィキペディアで「Vundo」の詳細全文を読む



スポンサード リンク
翻訳と辞書 : 翻訳のためのインターネットリソース

Copyright(C) kotoba.ne.jp 1997-2016. All Rights Reserved.