https://www.botnets.fr/index.php?action=history&feed=atom&title=The_%E2%80%98advertising%E2%80%99_botnet 2026-10-24T10:52:43Z Revision history for this page on the wiki MediaWiki 1.43.11 https://www.botnets.fr/index.php?title=The_%E2%80%98advertising%E2%80%99_botnet&diff=3389&oldid=prev 2015-02-08T16:48:06Z

<p>Text replacement - &quot; securelist.com&quot; to &quot;&quot;</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 16:48, 8 February 2015</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l5">Line 5:</td> <td colspan="2" class="diff-lineno">Line 5:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Licence=</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Licence=</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Video=</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Video=</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>|Link=https://www.securelist.com/en/analysis/204792172/The_Advertising_Botnet <del style="font-weight: bold; text-decoration: none;">securelist.com</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>|Link=https://www.securelist.com/en/analysis/204792172/The_Advertising_Botnet</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Author=Maria Garnaeva, Alexei Kadiev,  </div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Author=Maria Garnaeva, Alexei Kadiev,  </div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|NomRevue=Securelist Analysis</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|NomRevue=Securelist Analysis</div></td></tr> </table>

Eric.freyssinet https://www.botnets.fr/index.php?title=The_%E2%80%98advertising%E2%80%99_botnet&diff=2039&oldid=prev 2015-02-07T14:23:35Z

<p>1 revision imported</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <tr class="diff-title" lang="en"> <td colspan="1" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="1" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 14:23, 7 February 2015</td> </tr><tr><td colspan="2" class="diff-notice" lang="en"><div class="mw-diff-empty">(No difference)</div> </td></tr></table>

Eric.freyssinet https://www.botnets.fr/index.php?title=The_%E2%80%98advertising%E2%80%99_botnet&diff=2038&oldid=prev 2014-08-27T16:28:54Z

<p>Remplacement de texte — « |Editor=Kaspersky » par « |Editor=Kaspersky lab »</p> <p><b>New page</b></p><div>{{Publication<br /> |Image=artro_securelist_advertising.png<br /> |Legend=<br /> |Document=<br /> |Licence=<br /> |Video=<br /> |Link=https://www.securelist.com/en/analysis/204792172/The_Advertising_Botnet securelist.com<br /> |Author=Maria Garnaeva, Alexei Kadiev, <br /> |NomRevue=Securelist Analysis<br /> |Date=20 apr 2011<br /> |Editor=Kaspersky lab<br /> |Year=2011<br /> |ISBN=<br /> |Page=<br /> |Abstract=Bots belonging to the Artro botnet are detected by Kaspersky Lab products as Trojan-Downloader.Win32.CodecPack, which has been around since early 2008. However, a full description of its functionality is still not available, so to rectify this, we decided to publish the results of a study we undertook.<br /> <br /> The downloader<br /> <br /> The Artro botnet was created using a Trojan downloader that is detected by Kaspersky Lab as Trojan-Downloader.Win32.CodecPack. The Trojan is protected by a packer with heavily obfuscated code. As a rule, packers are used to prevent the detection of a packed malicious program rather than to protect its code from analysis, and this piece of malware is no exception: unpacking it is a relatively easy task. When unpacked, the WinMain function of different Trojans usually looks more or less the same. In this case, however, the malware authors tried to obfuscate their code by inserting large numbers of superfluous instructions in order to make the code harder to analyze.<br /> |Botnet=Artro, <br /> |Malware=CodecPack, New_bb, BannerBot, PopupBot, HitBot, Oms, <br /> |CCProtocol=, <br /> |Operation=, <br /> |Keyword=Advertising, Clickjacking, RC4, <br /> }}</div>

Eric.freyssinet