Author Topic: Is avast! missing latest TR/Kazy.MK here or has it already been closed?  (Read 1549 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33925
  • malware fighter
See: https://www.virustotal.com/nl/url/58b369634e9d33aa2ffca80ccb01e53a6f4e888c44119535b21e2a6e8ec487c2/analysis/1382532851/
latest file scan: https://www.virustotal.com/nl/file/029ed40a9db20f475a67668536d780616cd84522ce5413bd95fff22f46465f6d/analysis/1379278051/
see: http://urlquery.net/report.php?id=7083575
See what avast! does detect: Avast    Win32:Zbot-NRC [Trj]    20131023
Also -> http://www.avgthreatlabs.com/website-safety-reports/domain/tbhwrm.info/
Site is continually launching malware:
2013-10-23 04:03:20   htxp://tbhwrm.info/popo.exe   61550505DEFFA33B37EE1ACF90A09710   94.23.60.139   FR   RAR/Agent.I trojan   
2013-10-23 04:01:13   htxp://www.tbhwrm.info/bot.exe   771B39505BBE42B2CD73859D291A534A   94.23.60.139   FR   Win32/Spy.Zbot.YW trojan   
2013-10-23 03:34:22   htxp://tbhwrm.info/bot.exe   771B39505BBE42B2CD73859D291A534A   94.23.60.139   FR   Win32/Spy.Zbot.YW trojan   
2013-10-22 11:41:17   htxp://tbhwrm.info/oki.exe   28AFB33B7F69499E98E55827FAED346B   94.23.60.139   FR   Win32/TrojanDownloader.Wauchos.A trojan   
2013-10-21 22:22:23   htxp://tbhwrm.info/bo.exe   53803E6D6E072D8AAD51A01CBF924B5B   94.23.60.139   FR   RAR/Agent.I trojan

and https://www.virustotal.com/nl/domain/tbhwrm.info/information/

pol
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33925
  • malware fighter
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!