Difference between revisions of "Research Win32/Slenfbot"

From Botnets.fr
Jump to navigation Jump to search
(Page créée avec « {{Publication |Image= |Legend= |Document= |Licence= |Video= |Link=http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?name=Win32%2fSlenfbot |Author=... »)
 
m (Text replacement - " août " to " aug")
 
(One intermediate revision by the same user not shown)
Line 8: Line 8:
|Author=Hamish O'Dea, David Wood,  
|Author=Hamish O'Dea, David Wood,  
|NomRevue=Microsoft Malware Protection Centre
|NomRevue=Microsoft Malware Protection Centre
|Date=16 août 2008
|Date=16 aug2008
|Editor=Microsoft
|Editor=Microsoft
|Year=2011
|Year=2011

Latest revision as of 21:30, 5 August 2015

(Publication) Google search: [1]

Research Win32/Slenfbot
Botnet
Malware Slenfbot
Botnet/malware group
Exploit kits
Services
Feature
Distribution vector
Target
Origin
Campaign
Operation/Working group
Vulnerability
CCProtocol
Date 2011 / 16 aug2008
Editor/Conference Microsoft
Link http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?name=Win32%2fSlenfbot (Archive copy)
Author Hamish O'Dea, David Wood
Type

Abstract

Win32/Slenfbot is a worm that can spread via instant messaging programs, which may include MSN Messenger, Yahoo Messenger and Skype. It may also spread via removable drives or exploiting the MS06-040 vulnerability. This worm spreads automatically via shares, but must be ordered to spread via exploit or instant messaging by a remote attacker. The worm also contains backdoor functionality that allows unauthorized access to an affected machine.

Bibtex

 @misc{Lua error: Cannot create process: proc_open(/dev/null): failed to open stream: Operation not permitted2011BFR909,
   editor = {Microsoft},
   author = {Hamish O'Dea, David Wood},
   title = {Research Win32/Slenfbot},
   date = {16},
   month = Aug,
   year = {2011},
   howpublished = {\url{http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?name=Win32%2fSlenfbot}},
 }