Peaches Posted September 26, 2010 Report Share Posted September 26, 2010 New Azvhan Bot Family Revealed A new bot family was found in the wild around April this year. This family was named "Avzhan." Avzhan malware, detected by Trend Micro as Mal_Scar-1, mostly affected Asia where most of the affected users resided. Avzhan bots install themselves onto the Windows system directory using the file name {six random lower-case letters}.exe. After installation, it deletes its original copy then executes the copy it installed. It registers itself as a service to run at every system startup, as shown by the service named Q MUSCIC below [see screenshots on webpage] This malware tries to connect to the following domains to receive instructions from botnet herders:avzhan1.{BLOCKED}2.orgei0813.{BLOCKED}2.orgwanmei8013.{BLOCKED}2.orgxhsb.{BLOCKED}2.org More info & screenshots - http://blog.trendmicro.com/ Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.