ZACCESS/SIREFEF arrives with new infection technique - Revision history

Eric.freyssinet: Text replacement - " blog.trendmicro.com" to ""

2015-08-05T20:13:28Z

Text replacement - " blog.trendmicro.com" to ""

← Older revision		Revision as of 20:13, 5 August 2015
Line 5:		Line 5:
	\|Licence=		\|Licence=
	\|Video=		\|Video=
	\|Link=http://blog.trendmicro.com/zaccesssirefef-arrives-with-new-infection-technique/ ~~blog.trendmicro.com~~		\|Link=http://blog.trendmicro.com/zaccesssirefef-arrives-with-new-infection-technique/
	\|Author=Manuel Gatbunton,		\|Author=Manuel Gatbunton,
	\|NomRevue=TrendLabs Malware Blog		\|NomRevue=TrendLabs Malware Blog

Eric.freyssinet: Text replacement - " août " to " aug"

2015-08-05T19:31:48Z

Text replacement - " août " to " aug"

← Older revision		Revision as of 19:31, 5 August 2015
Line 8:		Line 8:
	\|Author=Manuel Gatbunton,		\|Author=Manuel Gatbunton,
	\|NomRevue=TrendLabs Malware Blog		\|NomRevue=TrendLabs Malware Blog
	\|Date=14 ~~août 2012~~		\|Date=14 aug2012
	\|Editor=Trend Micro		\|Editor=Trend Micro
	\|Year=2012		\|Year=2012

Eric.freyssinet: 1 revision imported

2015-02-07T14:27:24Z

1 revision imported

← Older revision		Revision as of 14:27, 7 February 2015
(No difference)

Eric.freyssinet: Page créée avec « {{Publication |Image= |Legend= |Document= |Licence= |Video= |Link=http://blog.trendmicro.com/zaccesssirefef-arrives-with-new-infection-technique/ blog.trendmicro.com |Au... »

2012-08-16T00:05:42Z

Page créée avec « {{Publication |Image= |Legend= |Document= |Licence= |Video= |Link=http://blog.trendmicro.com/zaccesssirefef-arrives-with-new-infection-technique/ blog.trendmicro.com |Au... »

New page

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Video=
|Link=http://blog.trendmicro.com/zaccesssirefef-arrives-with-new-infection-technique/ blog.trendmicro.com
|Author=Manuel Gatbunton,
|NomRevue=TrendLabs Malware Blog
|Date=14 août 2012
|Editor=Trend Micro
|Year=2012
|ISBN=
|Page=
|Abstract=During the last weeks of July, we received reports from customers that their services.exe files were being patched by an unknown malware. The patched services.exe, detected by Trend Micro as PTCH_ZACCESS (for 32-bit version) and PTCH64_ZACCESS (for 64-bit version), was verified to be a component of the SIREFEF/ZACCESS malware family. ZACCESS (also known as ZEROACCESS) used this patched system file to run its other malicious components upon reboot. This proved to be a new variant of SIREFEF/ZACCESS, which now uses user-mode technique to stealthily load its malicious code, instead of using regular rootkit techniques.
|Botnet=ZeroAccess,
|Malware=,
|CCProtocol=,
|Operation=,
|Keyword=,
}}