12345

4/14/2011

imm32.dll, its unforeseeable evolution (1)

1. Introduction

Recently, spread of malicious file to steal Korean online game account information is prevalent in here.
Besides, this malicious file adopted these methods changing "imm32.dll" file, located in Windows folder, to new type of malicious file or generate itself.
Therefore, general user who plays online game needs to be careful of infection.


2. Spreading path and symptoms of infection

This case of spreading infected malicious file related normal imm32.dll patch is frequently found. And its techniques are various. One of these main purposes is giving financial damage of infected user. One of spread malicious file found lately is using vulnerability of IE and induces to leak personal information.

Currently, this malicious file is redirected from certain web site, and following image shows download window to be spread so far.


Upon execution downloaded "aa.exe", it will create additional malicious file on following path.
Furthermore, it will rename normal imm32.dll to another name and patch.

Normally patched malicious imm32.dll will try to leak user account information and forcibly stop to certain anti-virus software.

* Generated files

C:\WINDOWS\system32\imm32.dll (86,016 bytes, Malicious)
C:\WINDOWS\system32\imm32B.dll (86,016 bytes, Malicious)
C:\WINDOWS\system32\imm32A.dll (110,080 bytes, Normal)


* Comparison information between normal and malicious imm32.dlls



* Control flow of malicious file and patching imm32.dll



3. How to prevent

To use your PC safely from security threats of these malicious applications, we recommend following tips "Security management tips" for general users.

Security management tips

1. Maintain the latest security update on OS and applications
2. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
3. Do not see and download attached file from suspicious e-mail.

INCA Internet (Security Response Center / Emergency Response Team) provides diagnosis/treatment function such as malicious file stated above and runs responding system 24 hours against various security threats.

41 comments:

  1. To write awesome character analysis essay you need to take a look at this blog article. You will be one of the best student in class

    ReplyDelete
  2. This is a good post. Many thanks for such an incredible post and the survey, I am completely awed! Keep stuff like this coming. This post gives really quality data. I am unquestionably going to investigate it. Extremely exceptionally valuable tips are given here. Much thanks to you to such an extent. Keep up the kind acts. Take a look at website for best dissertation writing service.

    ReplyDelete
  3. Thank you for this blog. I was about to sign up to first rate when this showed up in the results. I hope I can find something that can really help me out. I do not drive so an online work will be great.It really makes me happy and I am satisfied with the arrangement of your post. You are really a talented person I have ever seen.Geek Squad Tech Support visit for more information

    ReplyDelete
  4. Finding the best Help with Medical Assignment is not easy unless one is keen to establish a professional medical assignment help & medical homework help online.

    ReplyDelete
  5. Online e-commerce essay writing help services are very common nowadays since there are very many students seeking E-commerce Essay Writing Services and e-commerce research paper writing services.

    ReplyDelete
  6. Airlines-gethuman.org is a platform where you can Find Contact Information for all the airlines, Assistance with booking your flights, and vacation packages easily. It helps you to save both, your money and your time.


    Southwest Airlines Reservations

    Southwest Airlines Flights

    ReplyDelete
  7. To see who is going to become a millionaire from the Lottery Sambad result today, download today's Lottery Sambad result on this portal.After the bygone era, playing a lottery game is now an easy way to earn money in an exciting way.The lottery sambad Morning West Bengal State Lottery Nagaland state Lottery Kerala Lottery Result Kerala Lottery Today Result published three times a day, is a very quality lottery and Satta king results.

    ReplyDelete

  8. Airlines-gethuman.org is a platform where you can Find Contact Information for all the airlines, Assistance with booking your flights, and vacation packages easily. It helps you to save both, your money and your time.
    delta airlines flight

    ReplyDelete
  9. Thank you for sharing your article and I hope you will share some more information about this..keep sharing!! and please visit our website.
    India Broadcasting World brings you a complete package of the latest happenings Aoccuring in the Media & Entertainment Industry, Telecom Sector, Broadcasting & Cable TV Services in form of news, articles, guest articles.
    trai
    ibf

    ReplyDelete
  10. Thank you for sharing your article and I hope you will share some more information about this..keep sharing!! and please visit our website.
    India Broadcasting World brings you a complete package of the latest happenings Aoccuring in the Media & Entertainment Industry, Telecom Sector, Broadcasting & Cable TV Services in form of news, articles, guest articles.


    ibw
    Indian broadcasting

    ReplyDelete
  11. Visit microsoft365.con/setup or Microsoft Cloud Partner site. Click on “create a new account” or “Sign Up” tab. Enter an email associating to Outlook or use a mobile number. Click next and create a password. Follow instructions and create Microsoft Office 365.

    ReplyDelete
  12. هدف از پورت گذاری جلوگیری از آسیب های احتمالی به رگ ها و سایر ارگان های داخلی بدن در طی انجام شیمی درمانی است. برای اطلاعات بیشتر در باره نحوه جراحی پورت گذاری یا تعبیه کاتتر پورت برای شیمی درمانی می توانید به وبسایت دکتر ستایش مراجعه نمایید.

    ReplyDelete
  13. There are many usa escort agencies in the USA. But when it comes to genuine and most trustworthy none can stand with us. Escort city We are the top female escort, American call girlsservice provider in the USA. If you choose our female escort service, it will definitely be a wise decision. Offer In Call or OutCall escort service only all VIP hotels. Top-rated New York City escorts updated for 2021. View decadent high-res photos of irresistible escorts available right now. Escort service in California | ESCORT in New York City

    ReplyDelete
  14. I am feeling very happy after reading this article of yours. The way you have explained in this article is a great compliment. I read your article everyday.

    You Can Also Visit Our Website - ij.start.canon

    ReplyDelete
  15. Download Microsoft Office 365 and install it after ensuring that your system meets basic Office 365 requirements.visit microsoft365.com/setup and install the setup using the product key.

    ReplyDelete
  16. Go through the canon.com/ijsetup webpage, click Set Up and start the Canon ij printer setup process.Use ij.start canon to set up your Canon product. Get inkjet Canon printer and scanner support here .http://ij.start.canon is a Canon printer help site to download and install Canon printer drivers. Visit the https://ij.start.canon site and follow the guidelines shown here

    ReplyDelete
  17. McAfee.com/activate - Get world-class protection on your system by downloading, installing, and activating McAfee. Do so by visiting mcafee.com/activate. mcafee.com/activate

    ReplyDelete
  18. There are many usa escort agencies in the USA. But when it comes to genuine and most trustworthy, none can stand with us. Escort city We are the top female escort, American call girlsservice provider in the USA. If you choose our female escort service, it will definitely be a wise decision. Offer In Call or OutCall escort service only all VIP hotels. Top-rated New York City escorts updated for 2021. View decadent high-res photos of irresistible escorts available right now. Escort service in California | ESCORT in New York City

    ReplyDelete
  19. Thank you for sharing your information. I really appreciate your efforts and thank you very much for sharing an amazing information that I have been looking for for a long time.
    If you want to take print then there is a good chance for you why our printer will get very good facilities and our website will also tell you how to use it. And you will get a lot of information, canon.cpm/ijsetup you must try once and comment your questions to us. Thank you
    https://ijstartcannonx.com/

    ReplyDelete
  20. canon.com/ijsetup is an official web address used to set up the canon printer quickly. Therefore, the users looking for the setup instructions should visit the official website and follow the on-screen instructions to complete the setup procedure.
    canon.com/ijsetup
    ij.start.cannon

    ReplyDelete
  21. 123.hp.com/setup Hp is reinventing the ways ideas come to life by making printing more convenient, personal, efficient, and reliable. Therefore, with HP printers, users can explore the ways they express themselves more efficiently. Apart from the easy usage of HP printers, their setup procedure is also convenient. You can configure, download, and install your HP printers and drivers via 123.hp.com/setup. For this, firstly, you need to visit the official website of HP printer setup. Secondly, you should log in to your HP printer account or create an account. After this, you should click on the “Download drivers” to initiate the download procedure. Then, you need to follow the further on-screen instructions to complete the printer setup via 123.hp.com/setup.

    ReplyDelete
  22. 123.hp.com/setup Hp is reinventing the ways ideas come to life by making printing more convenient, personal, efficient, and reliable. Therefore, with HP printers, users can explore the ways they express themselves more efficiently. Apart from the easy usage of HP printers, their setup procedure is also convenient. You can configure, download, and install your HP printers and drivers via 123.hp.com/setup. For this, firstly, you need to visit the official website of HP printer setup. Secondly, you should log in to your HP printer account or create an account. After this, you should click on the “Download drivers” to initiate the download procedure. Then, you need to follow the further on-screen instructions to complete the printer setup via 123.hp.com/setup. 123.hp.com/setup

    ReplyDelete
  23. I got so involved in this material.
    This post give me lots of advise it is very useful for me.
    When you purchase a new printer, it delivers good results and works smoothly. But, as time passes by, it may give you the worst experience. Sometimes, you may display specific error messages that are enough to trouble you in your work, and other times it may undergo some technical difficulty. Visit our site and get rid of http//ij.start.canon problem.

    ReplyDelete
  24. ij.start.canon is a website to download Canon printer drivers, you can also visit www.canon.com/ijsetup website for same.

    ReplyDelete
  25. Hi,
    That's Great & Giving so much information after reading your blog. For RentaPC Laptop on Rent
    Great thanks to you
    Laptop on Rent

    ReplyDelete

  26. The widely popular video-sharing platform, YouTube, is viewed by millions of people across the globe. It is the second-largest and most viewed search engine next to Google. Video is the most impressive content format, and you can earn millions of views on YouTube posting your video content. If you are willing to make name, fame, and money, upload your videos on the platform. To get more likes, open your user account on YouTube, download, install, and activate it through youtube.com/activate. Streaming videos is the most powerful way to capture the emotion of people and getting more viewers.

    ReplyDelete
  27. The go-to site for online merchants and shoppers alike, Amazon is the titan of media, hardware, data storage, e-commerce, hardware, and payments. Amazon offers web-based music, movie, and video streaming subscription services through Amazon Prime Video and Prime Music. Being a Prime member, you can get quick access to new products and service launches. Whether you are in the comfort of your living room or on the go, you can access Amazon Prime Video and Music from anywhere. The exclusive, latest TV shows and movies become available on your smart TV, laptop, desktop, tablet, or phone. Get the Amazon Prime Video Subscription through www.amazon.com/code.

    ReplyDelete
  28. HBO Go offers a variety of shows and unlimited engaging content for its audience. You can view your favorite shows, comedy content, and original movies and shows. Additionally, you can view sports events, documentaries and listen to your favorite music on the video streaming service. You can watch and enjoy HBO Go content through its app on your mobile devices, digital media players, video game consoles, smart television, etc. To enjoy its engaging content and your favorite shows, you need to get an HBO subscription and set up your account on it. Activate HBO Go and HBO Now at hbonow.com/tvcode.

    ReplyDelete
  29. The video streaming app Hulu offers its services on a subscription basis that you can avail of on various devices such as iPhone, iPads, smart television, tablets, etc. Besides, you can view Hulu on your Xbox console also. But before that, you need to sign up to your Hulu account and then purchase its subscription plan among its four subscription packages as per your need and interest. Now, activate and download it through secure.hulu.com/activate. It will give you unlimited access to Hulu original movies, documentaries, and thousands of on-demand television shows and movies.
    Visit:
    roku.com/link

    ReplyDelete
  30. Hey! I was just exploring and came across your site. The articles and blogs were quite interesting to read. I am from technological field. If someone is interested to read about Antivirus software, then do visit my site
    mcafee.com/activate or
    norton.com/setup
    office.com/setup

    ReplyDelete
  31. Thank you for sharing your information. I really do appreciate your efforts and thank you very much for sharing a piece of wonderful information which I would long

    If you are thinking of getting a new ij start canon printer then you can get a Canon printer. This is a smart printer, in which you can easily connect wifi and take pictures and documents file.

    ReplyDelete
  32. It's my great pleasure to visit your blog and to enjoy your great posts here.
    Here we provide some useful information about Canon printers. If you buy a new printer and you are unable to set up the printer, follow our site and get complete guidelines on how to set up a Canon printer, follow the instructions here.
    http //ij.start.canon setup

    ReplyDelete