Home/ Spyware Encyclopedia / Exploit.RPC | |  | Exploit.RPC Technical Details |  |
| | Category |  | Exploit | | Discovered | | 4/7/2008 5:54:00 PM | | Modified | | 4/15/2008 1:04:00 PM | | Threat Level | | High | | Description | | Exploits use vulnerabilities in operating systems and applications to achieve the same result. Or in other words, this is a type of malware containing a piece of software, a chunk of data, or sequence of commands that take advantage of a bug, glitch or vulnerability in order to cause unintended or unanticipated behavior to occur on computer software. This frequently includes such things as gaining control of a computer system or allowing privilege escalation or a denial of service attack. | | Summary | | The hosts file was updated with the following url-to-ip mappings:
124.238.254.113 www.txwm1204.com
124.238.254.113 txwm1204.com
124.238.254.113 pr.749571.com
The following http urls were started:
a.8q8.biz:666
e.987255.com
a.987255.com
Generated smtp traffic: n/a
Connection(s) established with remote IRC Server: n/a
The following hidden entries created:
%SYSDIR%\drivers\msosfpids32.sys
%SYSDIR%\msosmnsf.dat
%SYSDIR%\msosmhfp00.dll
The following internet connection was established:
59.60.157.34:80
59.60.150.86:80
59.60.146.78:80
| | When the Exploit is executed, it creates the following files: | | Name | Version | Publisher | Signature (MD5) | File Size (in Bytes) | | ..\3f03d398.exe | | | e8dc0af74b35dbe7f3175bc1687cec36 | | | ..\3f03d398.exe | | | e8dc0af74b35dbe7f3175bc1687cec36 | 36164 | | ..\d87b849c.exe | | | dc7f3a6600f3bbcee774800e4b1c8a1d | 17525 |
|
| | When the Exploit is executed, it creates the following Registry entries: | | |
|
Recommendation to remove Exploit.RPC |  | Spyware Detector can remove Exploit.RPC, and thousands of other Spyware definitions, automatically and instantly. Click here to download Spyware Detector and scan for free. |
| |
|
| |
| |
| |  | Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.
| |  | Speed up your computer and increase browsing performance by deleting Spyware & Adware | | | Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software. | | | Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes. |
|
|
| |  | | | | | |  | |  Submit a Threat
Submit a threat to be reviewed by our research team
Submit a Threat | |  |
|
|