Transcription of Understanding WMI Malware - Trend Micro
{{id}} {{{paragraph}}}
Trend Micro , IncorporatedUnderstanding WMI MalwareJulius Dizon, Lennard Galang, and Marvin CruzA Trend Micro Research Paper I July 2010 Understanding WMI Malware2 RESEARCH PAPER I Understanding WMI MALWARECONTENTSINTRODUCTION ..3 WHAT IS WMI? ..4 WMI NAMESPACE: root\subscription ..5 WMI System Classes .. tim THE PUZZLE PIECES TOGETHER: Malware ROUTINES .. WMI Class Instances and ..12filetrans_consumer ..13 WMIS criptKids_consumer ..14 ProbeScriptKids_consumer ..15 MANUAL DETECTION ..16 Command Line: WMI CommandLine Tool ..16 GUI: WMI Tools ..16 MANUAL REMOVAL ..17 Command Line: WMI CommandLine Tool ..17 GUI: WMI Tools ..17 PREVENTION ..18 CONCLUSION ..19 GLOSSARY ..20 REFERENCES ..22 Understanding WMI Malware3 RESEARCH PAPER I Understanding WMI MALWAREINTRODUCTIONThis research paper will discuss how cybercriminals used Windows Management Instrumentation (WMI) as a venue to conveniently perform malicious activities on affected users systems.
Understanding WMI Malware 7 RESEARCH PAPER I UNDERSTANDING WMI MALWARE WMIScriptKids_consumer is an example of the active script event consumer instance
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document:
{{id}} {{{paragraph}}}