
2. Spreading path and symptom of infection
This file can be spread via attachment of e-mail, SNS, link on messenger. It uses PDF font exploit and following is affected versions.
Affect-able versions
- Adobe Reader 9.3.4 or lower
- Adobe Acrobat 9.3.4 or lower
In case of this malicious file, it used exploit which can cause stack overflow with using certain table of encrypted TTF(TrueTypeFont) stream on PDF file. Code is as following.
Upon executing this application program, it shows PDF file as following.
Besides, it creates additional malicious file on following path.
Created files
- (User temp folder)\~temqp.tmp (53,248 bytes)
- (User temp folder)\explorer.exe (53,248 bytes)
- (User temp folder)\~vmdmc.exe (484,864 bytes, copy of normal cmd.exe)
Registry values
- [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
- Name : "arun"
- Data : "(User temp folder)\explorer.exe"
(User temp folder) is generally "C\Documents and Settings\(User account)\Local Settings\Temp".
These malicious files have WORD file's icon.
And, these malicious files tried to access on certain external site of China, but that site can't be connected no more.
3. How to prevent
In case of these malicious files using document file exploit, precaution is almost impossible. Furthermore, these can be combined with social engineering technique. To use PC safely from security threats of these malicious attachments, we recommend you download latest security updates and obey following "Security management tips" for general users.
Security management
tips
1. Maintain the latest security update on OS and applications
2. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
3. Do not see and download attached file from suspicious e-mail.
4. Keep caution to link from instant messenger and SNS.
1. Maintain the latest security update on OS and applications
2. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
3. Do not see and download attached file from suspicious e-mail.
4. Keep caution to link from instant messenger and SNS.
INCA Internet (Security Response Center / Emergency Response Team) runs responding system against various security threats.
nProtect Anti-Virus/Spyware v3.0 diagnoses and treats various variant files.
Free installation link of nProtect AVS : http://avs.nprotect.com/
- Diagnosis names
- Trojan/W32.Agent.53248.CYM
- Trojan-Exploit/W32.Pidief.291556.JVF
- Trojan/W32.Agent.53248.DDR
Are you excited for NBA 2K18 Game? NBA 2k18 Game will feature NBA basketball games with real effects and customized players and teams. This game created with latest designed, game commentary, halftime shows and even various visual features and lighting, player animations and camera angles will be improved than previous series. NBA 2K18 Release Date
ReplyDeleteChào các bạn !!
ReplyDeleteMình đến từ Công ty van chuyen hang thai lan pusa asia nếu các bạn đang cần tìm nguồn hàng giá rẻ sỉ thì liên hệ chúng tôi ngay . PUSA ASIA chúng tôi sẽ giúp bạn dat hang thai lan online về cho bạn một cách đơn giản dễ dàng. Chỉ cần bên bạn ( quý khách hàng , người tiêu dùng v.v..) đưa thông tin sản phẩm cho PUSA ASIA chúng tôi , thì công ty chúng tôi sẽ tìm đến và mua , vận chuyển về Viêt Nam . Ngoài ra chúng tôi hỗ trợ bạn về ship hàng thái giá rẻ nhanh chóng uy tín .
Thông tin liên hệ :
CÔNG TY TNHH DV VẬN TẢI PUSA ASIA
+Thái Lan: +66.805586763 (Call,Viber,Zalo,Line. Người việt)
+Việt Nam: +84.949.456.968 - Email: pusa.asia@gmail.com
Lưu ý bên vận chuyển hàng thái lan pusa asia chúng tôi còn có chuyển hàng : thời trang, quần áo , hàng gia dụng , hàng điện tử , nhạc cụ âm nhạc (đàn tỳ bà) và những hàng nặng như xe đạp điện , xe máy v.v..
=> chuyển hàng thái lan về bến tre
buôn bán hàng thái chợ chatuchak thái lan
ReplyDeletenhập bán đá khô sỉ lẻ tại tphcm
ReplyDeleteHey there! Looking for a decent paper writing service, eh? Well, consider you've found it!
ReplyDeleteThis comment has been removed by the author.
ReplyDeleteThis comment has been removed by the author.
ReplyDeleteI want to note that your blog is very informative and you are incredibly responsible for the formation of content, which brings a lot of benefits to the blog.
ReplyDeleteThanks to such articles, each person can understand this topic and avoid unpleasant consequences in the future.
ReplyDeleteThanks for sharing, nice post! Post really provice useful information!
ReplyDeleteGiaonhan247 chuyên dịch vụ mua hàng trên dịch vụ mua hàng trên ebay việt nam cùng với bảng giá gửi hàng đi mỹ của dịch vụ order hàng hàn quốc giá rẻ.
a wonderful article, Given so much info in it, These type of articles keeps the users interest in the website, and keep on sharing more ... good luck!
ReplyDeleteLooking for someone write my assignment here are Expert Allassignmenthelp well efficient and capable of creating unique assignments for students .Online Assignment Help is a term which is best for students help, they can easily get help for their assignments online.
ReplyDeleteIt’s good to know about your blog and its post. You have done pretty impressive work on this blog and it posts, Keep up doing well. dissertation help
ReplyDeleteStudents Assignment Help provides the best nursing assignment help services to the students. Our expert team is available anytime to help in all academic writings like Dissertation Writing, Essay Assignment Help, course work, Assignment Help.
ReplyDeleteKineMaster for ios
ReplyDeleteFree fire ios
KineMaster
garena Free fire
Students Assignment Help is the most professional nursing assignment help service provider agency. Our assignment services are the best to meet the academic needs of students. For details email us at info@studentsassignmenthelp.com or WhatsApp +44-755- 536-9184
ReplyDelete
ReplyDeleteComplete My Assignment is a web portal where students get help in making assignments for all the subjects, with the help of our experts. You will get 100% plagiarism free assignment. Expert’s consultation is also available for students. If they have any query they can contact with our experts anytime.
academic writing services
assignment making websites
online assignment help
assignment solution help
Get Best Australian Assignment Help
Allessaywriter can provide you all the answers regarding who can "write my essay". In our service, we have some of the best writers & essay editors who are professional in this field. We ensure a high quality work within the stipulated time. Not only that, but our prices are so reasonable that you do not have to peep into your pocket before hiring us.
ReplyDeleteEach comment is an opinion, I often read it for a broader view
ReplyDeletewuxiaworld
Thanks for sharing, nice article! The article really provides a lot of useful information for me.
ReplyDeleteProship là đơn vị cung cấp tới quý khách hàng dịch vụ vận tảinội địa, dịch vụ chuyển phát nhanh, dịch vụ ship cod, cho thuê xe tải,... uy tín, nhanh chóng và giá rẻ hiện nay tại TPHCM.
that is really a great article. keep sharing information like this.
ReplyDeleteOur non plagiarized custom term papers are reputable and known for offering high quality custom term papers. We normally write academic papers in all disciplines of study including those seeking for write my nursing paper services.
ReplyDeletethank for the great and cool stuff
ReplyDeleteI think this is an informative post and knowledgeable. I would like to thank you for the efforts you have made in writing this article
ReplyDeletepackers and movers in shimla
Sofa Table: Riyadh cleaning company usually ignore the area behind the sofa, you can put a table.
ReplyDeleteOrganize your CD, DVD and video collection: Keep just what you need and get rid of the rest, and what you will keep in order.
Family play area: Family meeting for play and fun is very important for family bonding, devote a place to put games and do not leave them scattered in the room.
تنظيف فلل بالرياض
تنظيف مجالس بالرياض
تنظيف كنب بالرياض
تنظيف موكيت بالرياض
تنظيف مكيفات اسبلت بالرياض
جلي بلاط بالرياض
تنظيف خزانات بالرياض
عزل خزانات بالرياض
كشف تسربات المياه بالرياض
Thanks a lot for providing such information with us.
ReplyDeleteIT Company
This is very informative and useful post. Thanks for sharing amazing post.
ReplyDeletetop baby monitor reviews
absolute extracts
ReplyDeletebuy absolute extracts
cookies carts
cookie cart
cookies dab carts
real cookies carts
buy bloom vape
bloom carts
buy aliens rx cartridge
aliens rx cartridge
aliens rx
buy boom carts
boom carts
buy dompen cartridges
buy dompen cartridges
dompen vape
dompen review
buy pure one cartridges
pure one carts
pure one
Well known information provide by the author for who’m which can passes this article and blogs, a creativity shown by the person who make’s this relevant material for us thanks to stay with us with your best skills.Aol Error Loading Message Please Try Later
ReplyDelete
ReplyDeleteشركة تنظيف في الكويت شركة تنظيف بالكويت
فني صحي فني صحي في الكويت
سباك الكويت سباك بالكويت
شركة تنظيف كنب الكويت تنظيف كنبات الكويت
ادوات صحيه الكويت ادوات صحيه الكويت
شركة غسيل سجاد الكويت غسيل سجاد الكويت
فني كهربائي منازل الكويت كهربائي منازل في الكويت
شركة تنظيف في الكويت شركة الكويت سيرفيس للتنظيف
ReplyDeleteHouse Cleaning Dublin, Residence Cleaning Services Dublin Aboutime
Were Florida Residential Cleaning Service and we have been in business inside the Treasure Pit since 2008. Who wants to scramble around dusting, moping and scanning toilets inbetween frosting a birthday cake or puting an impromptu guests bedroom together? I avoid care how much house cleaners make in balance with how much nurses
make. Inside the first-rate jungle of New You are able to, many luxuries are typically in view but out of reach - let Cleaning service Sailors show you first hand that professional cleaning just isn't one of them. Your trusted, fully equipped professional cleaner will arrive on time, every time and clean your home.شركة نظافة
تنظيف منازل بالرياض
تنظيف كنب بالرياض
تنظيف شقق بالرياض
تنظيف خزانات بالرياض
تنظيف فلل بالرياض
تنظيف مكيفات بالرياض
ReplyDeleteشركة تنظيف موكيت بالدمام
شركة تنظيف موكيت بالجبيل
Many students opt to seek Custom Economics Writing Services since most writing companies are good in Economics Essay Writing Services and Economics Coursework Writing Services.
ReplyDelete[URL="https://b-yout.com/"]شركة البيوت للخدمات المنزلية[/URL] تقدمة : [URL="https://b-yout.com/%d8%b4%d8%b1%d9%83%d8%a9-%d9%83%d8%b4%d9%81-%d8%aa%d8%b3%d8%b1%d8%a8%d8%a7%d8%aa-%d8%a7%d9%84%d9%85%d9%8a%d8%a7%d9%87-%d8%a8%d8%a7%d9%84%d8%b1%d9%8a%d8%a7%d8%b6/"]كشف تسربات المياه بالرياض[/URL], [URL="https://b-yout.com/%d8%b4%d8%b1%d9%83%d8%a9-%d9%83%d8%b4%d9%81-%d8%aa%d8%b3%d8%b1%d8%a8%d8%a7%d8%aa-%d8%a7%d9%84%d9%85%d9%8a%d8%a7%d9%87-%d8%a8%d8%ac%d8%af%d8%a9/"]كشف تسربات المياه بجده[/URL], [URL="https://b-yout.com/%d8%b4%d8%b1%d9%83%d8%a9-%d8%b9%d8%b2%d9%84-%d9%85%d8%a7%d8%a6%d9%8a-%d8%a8%d8%a7%d9%84%d8%b1%d9%8a%d8%a7%d8%b6/"]عزل مائي[/URL], [URL="https://b-yout.com/%d8%b4%d8%b1%d9%83%d8%a9-%d8%b9%d8%b2%d9%84-%d9%81%d9%88%d9%85-%d8%a8%d8%a7%d9%84%d8%b1%d9%8a%d8%a7%d8%b6/"]عزل فوم[/URL], [URL="https://b-yout.com/%d9%86%d9%82%d9%84-%d8%a7%d8%ab%d8%a7%d8%ab-%d9%86%d9%82%d9%84-%d8%b9%d9%81%d8%b4/"]نقل اثاث بالرياض[/URL], [URL="https://b-yout.com/%d8%a7%d9%81%d8%b6%d9%84-%d8%b4%d8%b1%d9%83%d8%a9-%d8%aa%d8%ae%d8%b2%d9%8a%d9%86-%d8%a7%d8%ab%d8%a7%d8%ab-%d8%a8%d8%a7%d9%84%d8%b1%d9%8a%d8%a7%d8%b6/"]تخزين اثاث بالرياض[/URL], [URL="https://b-yout.com/%d8%b4%d8%b1%d9%83%d8%a9-%d8%b1%d8%b4-%d9%85%d8%a8%d9%8a%d8%af%d8%a7%d8%aa-%d9%88%d9%85%d9%83%d8%a7%d9%81%d8%ad%d8%a9-%d8%a7%d9%84%d8%ad%d8%b4%d8%b1%d8%a7%d8%aa/"]رش مبيدات بالرياض[/URL], [URL="https://b-yout.com/%d8%b4%d8%b1%d9%83%d8%a9-%d8%aa%d9%86%d8%b8%d9%8a%d9%81-%d9%85%d9%86%d8%a7%d8%b2%d9%84-%d8%a8%d8%a7%d9%84%d8%b1%d9%8a%d8%a7%d8%b6/"]شركة تنظيف بالرياض[/URL]
ReplyDeleteAl Qur'an Keutamaan Doa Abu Darda RA Syekh Abdul Qodir Jailani Rahmat Allah SWT Malaikat Mazhab Hanafi Shalat Tahajud Shalawat Nabi Muhammad Shallallahu 'Alaihi Wa SallamCara Wudhu Nabi Muhammad Saw
ReplyDeleteشركة كشف تسربات المياة بالعزيزية
ReplyDeleteتنظيف خزانات بالقطيف
شركة تنظيف خزانات بالدمام
تنظيف خزانات بالهفوف
تنظيف خزانات بحفر الباطن
شركة تسليك حمامات بالدمام
شركة الافضل
شركة كشف تسربات المياة برأس التنورة
شركة تنظيف مجالس بالبكيرية
ReplyDeleteشركة تنظيف شقق بالبكيرية
شركة نقل عفش بالقصيم
شركة تنظيف منازل بالرس
شركة رش مبيدات بالرس
شركة تنظيف شقق بالرس
شركة تنظيف كنب بالبكيرية
شركة تنظيف كنب بالرس
ReplyDeleteشركة تنظيف مجالس بعنيزة
شركة تنظيف شقق بعنيزة
شركة تنظيف منازل بعنيزة
شركة تنظيف منازل بالبكيرية
شركة تنظيف كنب بالرس
شركة تنظيف مكيفات بالبدائع
شركة بيرم
ReplyDeleteشركة مكافحة حشرات ببريده
شركة نقل عفش ببريدة
افضل شركة تنظيف منازل ببريده
شركة مكافحة حشرات ببريدة
مكافحة النمل الابيض ببريدة
دانلود آهنگ جدید
ReplyDeleteدانلود آهنگ جدید
آهنگ شاد رقصیدنی
ریمیکس رادیو جوان
ریمیکس شاد قدیمی
آهنگ تولدت مبارک
آهنگ پرسپولیس
آهنگ رپ خارجی
آهنگ های علی یاسینی
آهنگ شاد عروسی
If you still need a tool that will let you access the messages on your girlfriend's or boyfriend's device, you can check https://www.mspy.com and read more about phone tracking options they provide. Their mSpy app is actually good for companies too, I think.
ReplyDeleteسئو سایت
ReplyDeleteطراحی سایت آگهی
ساخت سایت
ReplyDeleteتبلیغ در گوگل
Hi, this is a wonderful piece of writing. I want to say that a nursing professional portfolio is a must-have document for every nurse. It contains everything a nurse needs in their career. The idea is to collect everything and have it in one place to easily trace them whenever you need them. There are nursing students who finding compiling the documents and putting them in one place difficult and opt to look for help in a platform like Nursing Professional Portfolio Writing Help . Luckily, we are always here to help.
ReplyDeleteThere is a best place to get Human Resources Assignment Help As well as get access to Human Resources Research Writing Help The company also offers Online Essay Writing ServicesAt the lowest price.
ReplyDeleteمكافحة حشرات دبي
ReplyDeleteمكافحة حشرات ابوظبي
مكافحة حشرات عجمان
مكافحة حشرات الشارقة
hotmail.com
ReplyDeleteWales publications are well-known publishing solution providers in various disciplines in the UK, Wales Publications serving to scientific organizations worldwide. Contact us for further information and know our best services and deals to achieve your goal.The fast submission process includes rapid publication research in UK that includes unique rapid process, inhouse peer review and 100% acceptance guarantee.
ReplyDeleteNice sharing, Thanks for sharing this type of posts, I search many time this type of post, are you interest to
ReplyDeleteTop 5 Religions of the World
i really loved this post. this is very infomative article. Keep updated More. God bless you, are you interest to Sahih Muslim Hadith
ReplyDelete