https://www.botnets.fr/index.php?action=history&feed=atom&title=The_mystery_of_Duqu%3A_part_five 2026-10-24T23:16:48Z Revision history for this page on the wiki MediaWiki 1.43.11 https://www.botnets.fr/index.php?title=The_mystery_of_Duqu:_part_five&diff=3094&oldid=prev 2015-02-07T17:02:05Z

<p>Text replacement - &quot; www.securelist.com&quot; to &quot;&quot;</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 17:02, 7 February 2015</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1">Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>{{Publication</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>{{Publication</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>|Link=http://www.securelist.com/en/blog/606/The_Mystery_of_Duqu_Part_Five <del style="font-weight: bold; text-decoration: none;">www.securelist.com</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>|Link=http://www.securelist.com/en/blog/606/The_Mystery_of_Duqu_Part_Five</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Author=Igor Soumenkov</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|Author=Igor Soumenkov</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|NomRevue=Securelist</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>|NomRevue=Securelist</div></td></tr> <!-- diff cache key wiki:diff:1.41:old-2147:rev-3094:php=table --> </table>

Eric.freyssinet https://www.botnets.fr/index.php?title=The_mystery_of_Duqu:_part_five&diff=2147&oldid=prev 2015-02-07T14:24:11Z

<p>1 revision imported</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 14:24, 7 February 2015</td> </tr><tr><td colspan="4" class="diff-notice" lang="en"><div class="mw-diff-empty">(No difference)</div> </td></tr> <!-- diff cache key wiki:diff:1.41:old-2146:rev-2147 --> </table>

Eric.freyssinet https://www.botnets.fr/index.php?title=The_mystery_of_Duqu:_part_five&diff=2146&oldid=prev 2014-08-27T16:29:33Z

<p>Remplacement de texte — « |Editor=Kaspersky » par « |Editor=Kaspersky lab »</p> <p><b>New page</b></p><div>{{Publication<br /> |Link=http://www.securelist.com/en/blog/606/The_Mystery_of_Duqu_Part_Five www.securelist.com<br /> |Author=Igor Soumenkov<br /> |NomRevue=Securelist<br /> |Date=2011-11-15<br /> |Editor=Kaspersky lab<br /> |Year=2011<br /> |Botnet=Duqu<br /> |Malware=Duqu (bot)<br /> |Abstract=The driver is the first component of Duqu to be loaded in the system. As we discovered, the driver and other components of malware are installed with a dropper exploiting a 0-day vulnerability (CVE-2011-3402). The driver is registered in the HKLM\System\CurrentControlSet\Services\ registry path. The exact name of the registry key varies in different versions of Duqu drivers.<br /> <br /> Once the driver is loaded, it decrypts a small block that contains its registry key and the name of the registry value to be read from that key. It also contains the name of the driver object to create<br /> }}</div>

Eric.freyssinet