Parent class: Malware
Malicious tools are malicious programs designed to automatically create viruses, worms, or Trojans, conduct DoS attacks on remote servers, hack other computers, etc. Unlike viruses, worms, and Trojans, malware in this subclass does not present a direct threat to the computer it runs on, and the program’s malicious payload is only delivered on the direct order of the user.Read more
Class: Exploit
Exploits are programs that contain data or executable code which take advantage of one or more vulnerabilities in software running on a local or remote computer for clearly malicious purposes. Often, malicious users employ an exploit to penetrate a victim computer in order to subsequently install malicious code (for example, to infect all visitors to a compromised website with a malicious program). Additionally, exploits are commonly used by Net-Worms in order to hack a victim computer without any action being required from the user. Nuker programs are notable among exploits; such programs send specially crafted requests to local or remote computers, causing the system to crash.Read more
Platform: Win32
Win32 is an API on Windows NT-based operating systems (Windows XP, Windows 7, etc.) that supports execution of 32-bit applications. One of the most widespread programming platforms in the world.Description
Technical Details
The DebPloit exlopit uses a vulnerability in the security system to assign permissions under WinNT systems (this includes Win2000) - it does not effect WinXP. It uses any process to exploit the permissions of any other process.
By controlling permissions allocation, Debploit has the ability to, for example, promote all users to the status of system/admin - that is if the targeted process is running under the LocalSystem, Administrator account.
As a result any process being run with User rights can let DebPloit into the Administration process, and restart itself with Administrator rights, for example.
This virus works on Microsoft Windows NT 4.0 and Windows 2000 with ServicePaks installed prior to Mar-12-2002 (It doesn't work if ServicePacks were installed after Mar-12-2002).
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com