12345

5/11/2011

[Warning] Identified malicious file at face YouTube site

1. Introduction

Recently, malicious files have been spread with Java Applet from the fake YouTube site.
As always we surf and see the videos in YouTube or elsewhere and we have no doubt to see those media.
Therefore, we need to be careful for these cases of being infected this malicious file. And have to find to avoid from those symptoms.


2. Spreading path and symptoms of infection

Not only for this site disguised as this kind of a video sharing website as following figure, but the commonly disguised site also can dazzle that user can be download malicious file.



If you visit this site, you can download "(~)youtube.com/YouTube.jar" which is using Java Applet and execute that file. Moreover, in case of being installed and configured JDK, additional malicious files can be downloaded because of "YouTube.class" in "YouTube.jar" file.

* Internal code of “YouTube.class”



* Generated file

  - (User temporary folder)\10058-1.exe(89,600 bytes)
  - Changing downloaded file name : 10058-1.exe -> privzate.exe

* C:\Documents and Settings\(user account)\Local Settings\Temp is generally user temporary folder.

Excepting for fake YouTube site mentioned above, various types of sites containing interest contents can be using bypass.



Additional malicious file(10058-1.exe) is being downloaded from Romanian server with this following figure.



Furthermore, if infected from this “10058-1.exe”, PC will try to access this following site and can work as a Bot sometimes.



3. How to prevent

In case of this malicious file, there is a big possibility to be emerged various variants.
To use PC safely from these security threats of these malicious files, we recommend following tips "Security management tips" for general users.

Security management tips

1. Maintain the latest security update on OS and applications
2. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
3. Do not see and download attached file from suspicious e-mail.
4. Keep caution to link from instant messenger and SNS.

INCA Internet (Security Response Center / Emergency Response Team) provides diagnosis/treatment function such as malicious file stated above and runs responding system 24 hours against various security threats.

54 comments:

  1. The solution can be different in each way. In some way, you have to download missing file, while at other cases, you would be asked to replace corrupted file version and replace it with the working one.send large files

    ReplyDelete
  2. I am happy to see this post. Now I know how to protect my PC. Thanks a lot!

    ReplyDelete
  3. Quickbooks is an accounting software used to maintain or create accounts details and records for the business and companies and in case you need any assistance contact Quickbooks tech support and ask for Quickbooks assistance

    ReplyDelete
  4. free robux generator is the best online website to generate the free robux currency used in the unlock of various gaming accessories and characters.

    ReplyDelete
  5. robux is the currency which allows you to do all the things on the game. With the robux currency you also get the free robux used in the generation of the games.

    ReplyDelete
  6. need free robux hack ?
    Then you can check our website. where you can read the full information related to robux generator. similarly most of the peoples are looking for Free vbucks to unlock their favorite characters and outfits for more information visit our website.

    ReplyDelete
  7. This comment has been removed by the author.

    ReplyDelete
  8. I play baseball. I spend a lot of time on training. My training should be at the forefront. I need to buy professional memo papers. At Exclusivepapers I found a lot of interesting to learn which saved my time.

    ReplyDelete
  9. free to play everything and it is a good challenge to create your own games on roblox.

    ReplyDelete
  10. free robux is the better gaming website which allows you to unlock new gaming accessories and characters to get the better access to the gaming.

    ReplyDelete
  11. free robux generator is the best online gaming currency generation website to unlock new gaming accessories and characters to get the better look to the game.

    ReplyDelete
  12. how to get free robux ?
    if you need free robux for purchasing the game accessories, characters and outfits and many more to make your game better then other then you can use our new tool, which is robux generator by which you can create unlimited free robux currency.

    ReplyDelete
  13. looking for Free vbucks ?
    if you are playing fortnite game and need vbucks for unlocking the characters and outfits then you can use our latest tool by which you can create unlimited free vbucks. these vbucks are not transferred from one account to another.

    ReplyDelete
  14. free robux is the best online gaming currency generation website to unlock new gaming characters and accessories to get the better gaming exposure.

    This is made possible because of the free robux hack which is used by us.

    ReplyDelete
  15. Great information keep providing such info by reading such thing we get upto date if you wish to know about viewmypaycheck then check the link http://viewmypaycheck.co/

    ReplyDelete
  16. To check the print quality of your printer whether color or black and white just visit printer color test don't to download any software and easy troubleshoot your printer problems.

    ReplyDelete
  17. if you find this very worthy than you should read this promo codes for robux

    ReplyDelete
  18. Quickbooks provides tech assistance services like Quickbooks payroll support, Quickbooks tech support, Quickbooks chat support, etc for your support as in case you need any assistance regarding Quickbooks issues you can contact any of these tech services and ask for Quickbooks assistance

    ReplyDelete
  19. Quickbooks is a tech assistant provider company that provides tech assistance for all tech-related issues in Quickbooks books as in case you face any issue in the software you can contact Quickbooks tech support and ask them for Quickbooks support

    ReplyDelete
  20. nice blog ..thanks to share with us.

    ReplyDelete
  21. Quickbook fast moving era that manage your Business Account anytime and anywhere. that software cloud-based software. If you have any problem to visit Quickbooks online Support

    ReplyDelete
  22. Quickbooks online Support that helps to manage your business Account and company from one device or computer.that software manages any time anywhere.Quickbooks Cloud-based Accounting software with the help of advance online Accounting Application software. You can easily track and manage your Account.

    ReplyDelete
  23. Norton Setupprovides you best anti-virus and malware protection software. Norton product key is the key which you would need to activate the software. If you are facing any problem in relation to the viruses then please visit our website.

    ReplyDelete
  24. This manufacturer can instantly generate 6000, 4000, 1600, 800 and 400 ms cards so you can redeem your account immediately.

    ReplyDelete
  25. Thank you for sharing this kind of information through this blog. Now, click to play the best online Bubble shooter game. It's one of the best casual games in all over the world. So visit this website, play this game and collect your maximum points to make your highest score.

    ReplyDelete
  26. QuickBooks Online Support || +1-888-308-0575 || Arizona(USA)~customer service
    QuickBooks Support is help you to efile your tax. You can take help our QuickBooks Online Support. Our Technical expert give the solution immediately. QuickBooks Support is an accounting Software. If you have any technical issue regarding installation of QuickBooks Support Accounting Software. You can contact our technical Expert 24/7. They resolve your query immediately.
    http://youraccuracy.com/quickbooks-online-support/

    ReplyDelete
  27. Hey, nice post. Visit this writing service for buying assignment in UK this is the best place to order an assignment. Good luck with your colleges guys!

    ReplyDelete
  28. THanks for sharing. I also wanna share this writing service for buying essay cheap in AU so if u wanna order an essay u should visit it. See u later, bye.

    ReplyDelete
  29. Online information technology assignments help companies are very keen when it comes to Information Technology Writing Services for IT students in order for them to score straight A’s in their information technology research papers.

    ReplyDelete
  30. free robux generator is the best online gaming currency generation website to unlock new gaming accessories and characters in the game.

    ReplyDelete
  31. free robux hack is used to generate the robux currenecy for the game.

    ReplyDelete
  32. Currently QuickBooks comes under the best accounting software if you are working on QuickBooks and start facing issues while performing financial accounting tasks then connect rapidly on our QuickBooks Help +1-805-617-3111 to solve the issues instantly.

    ReplyDelete
  33. QuickBooks users who are interested in adopting trending accounting software called QB accounting software they can contact us on our QuickBooks Help +1-805-617-3111 for knowing more about QB software prices and versions and for solving error issues in just a minute. Anytime when you are uncomfortable with your existing software just reach us for switching the service.​

    ReplyDelete
  34. Thanks for the blog loaded with so many information. I’ll be sure to bookmark it and, come back to read more of your useful info. Travel Agency Software

    ReplyDelete
  35. mcafee security
    Antivirus software works to block viruses from entering your computer system and kill or quarantine viruses that have some broken.Download, Install and Activate your mcafee product card from mcafee live safe, mcafee total protection, internet security, mcafee removal tool

    ReplyDelete
  36. Online logistics research paper writing help has become very popular among students seeking Logistics Writing Services Online and logistics and supply management essay writing services.

    ReplyDelete
  37. use free v-bucks generator
    tool to create unlimite free vbucks by these free vbucks you can unlock your favorite character in fortnite for more information you can visit our website

    ReplyDelete
  38. Quickbooks File Doctor is here to take care of your data. This is a product of intuit and is now available to you with the more powerful and advance security feature and with a great will power to make you benefit in all situations.

    ReplyDelete
  39. This comment has been removed by the author.

    ReplyDelete
  40. if you are playing online game you can play free robux generation for your children https://freerobuxgenerators.co/

    ReplyDelete
  41. if you want to play online game you can play free stream codes you can play wath your family friends and many other https://freesteamcodes.co/free-steam-code-100/

    ReplyDelete
  42. if you are playing on;one game and you want some xbox codes then you can click the link https://xboxgiftcard.co/

    ReplyDelete
  43. if you are playing online game and you want some steam codes then you can click the link and get it for your game

    ReplyDelete
  44. Wonderful Article , if want to Know free Robux Generator then you can try Robux generator no human verification

    ReplyDelete
  45. if you are playing online game and you want some free steam codes for your game then you can click the link and get it

    ReplyDelete