Author Topic: A new trojan  (Read 4204 times)

0 Members and 1 Guest are viewing this topic.

1099511627776

  • Guest
A new trojan
« on: July 10, 2010, 07:52:52 PM »
1. Here is a new trojan for you database ( DrWeb reported this as Trojan.Muldrop) ( rename txt to zip. This zip is password protected with password "virus" )
2. An issue. Make a virus signup form at your site ( or better in antivirus itself make a button "report unknown virus" or something"

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88771
  • No support PMs thanks
Re: A new trojan
« Reply #1 on: July 10, 2010, 08:18:20 PM »
Are you using avast ?

If so add it to the chest, use the avast chest to send the sample to avast.

We don't want the avast support forums to be used as a repository for malware distribution, please remove the attachment. Either send it using the chest as suggested or Send the sample to virus (at) avast (dot) com zipped and password protected with the password in email body and undetected malware in the subject.

However, flip flopping the file type from zip to txt to be able to upload it corrupts the zip file into a flat file when it is saved to the forums, so trying to convert it back to a zip file fails to open as a zip file.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.1.6099 (build 24.1.8821.762) UI 1.0.796/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline superhacker

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 979
  • superhacker != super mario
Re: A new trojan
« Reply #2 on: July 10, 2010, 09:15:19 PM »
or scan it in virus total and the site will send a copy to every av vendor
Dreams don't die, they just fall asleep.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88771
  • No support PMs thanks
Re: A new trojan
« Reply #3 on: July 10, 2010, 09:45:51 PM »
Well that is meant to be the case, but some of the avast virus labs state that much of what comes from VT isn't good. I much prefer to send it personally than rely on a third party.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.1.6099 (build 24.1.8821.762) UI 1.0.796/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Hermite15

  • Guest
Re: A new trojan
« Reply #4 on: July 10, 2010, 10:03:25 PM »
We don't want the avast support forums to be used as a repository for malware distribution

+1

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33871
  • malware fighter
Re: A new trojan
« Reply #5 on: July 10, 2010, 11:39:43 PM »
Hi Logos

1099511627776 is not giving a link to any live malware here and then only those logged in can download the txt file. Txt files are known not to infect but they can be flagged by av, then additionally I have every attachment here blocked with NoScript up...

polonus
« Last Edit: July 10, 2010, 11:42:03 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88771
  • No support PMs thanks
Re: A new trojan
« Reply #6 on: July 10, 2010, 11:53:00 PM »
Wrong, he was attaching what he thought was a zipped sample by changing the file type to .txt to get round the fact that the forum doesn't accept zip files. The fact that he wasn't aware that in attaching it as a .txt file would screw up the zip format is neither here nor there, the act was to deposit what was considered an infected sample on the forums.

So the statement I made is correct, "We don't want the avast support forums to be used as a repository for malware distribution, please remove the attachment. "

Repository (the word I used), is also somewhat different from giving a direct link as the contents wouldn't be stored on the avast forums.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.1.6099 (build 24.1.8821.762) UI 1.0.796/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security