Samples missed by avast (VirusTotal links only!)

[polonus]

Hi Dim@rik,

Well a year means ages in computer terms: 2011/01/15 13:57:20 (CET)
But 2008 means a golden oldie:
Detected   Jun 15 2008 16:27 GMT
Released   Jun 15 2008 21:14 GMT
McAfee Description Modified 2004-06-09

polonus

[REDACTED]

Hi Dim@rik,

Well a year means ages in computer terms: 2011/01/15 13:57:20 (CET)
But 2008 means a golden oldie:
Detected   Jun 15 2008 16:27 GMT
Released   Jun 15 2008 21:14 GMT
McAfee Description Modified 2004-06-09

polonus

Hi Polonus

Old macro

[polonus]

@Dim@rik

Stare przeboje.

pozdrawiam,

Damian

[polonus]

See: http://www.virustotal.com/url-scan/report.html?id=833ba4370a302059694636f14f1bd217-1323187934
and
http://www.virustotal.com/file-scan/report.html?id=2101461338093052af0a45936d9c1aa6c6fb4546849f192ab2a02a224a8c2bac-1323191725
High risk: http://siteinspector.comodo.com/public/reports/748001

polonus

[razoreqx]

Bookmarked

[DavidR]

Bookmark it, stickies are a pain in the rear; not long back you had to scroll down to get to the live content too many stickies.

[Asyn]

Bookmark it, stickies are a pain in the rear; not long back you had to scroll down to get to the live content too many stickies.

+1

[polonus]

zeus v2 trojan detection
See: http://www.virustotal.com/url-scan/report.html?id=44fe92bbbdf8dba89791a2d93cb2aa21-1323275210
See: http://www.virustotal.com/file-scan/report.html?id=197073d0ff15cda527ab0eba11614885b533e6cf5d27a359719365e292fad7ed-1323278814
Blacklisted: http://siteinspector.comodo.com/public/reports/754142

reported to virus AT avast dot com

pol

[REDACTED]

Winlock aka Ransom

http://www.virustotal.com/file-scan/report.html?id=b8fd8574cddd5f42cee752b90d335d273ce841b8832226888e796534951145ac-1323284069

http://www.virustotal.com/file-scan/report.html?id=d072a8782c4bf5e7c9d2f8194a52a17775fb0a5171ff76b64f20312e93ed2866-1323284252

exploit pack - Exploit.Java.CVE-2011-3544 (Caught on the same site where the spread blockers)

http://www.virustotal.com/file-scan/report.html?id=e033996289f657e5c3549239049432e1e0c342810eb8a9cabd28dfe070eecdb8-1323284330

Sent to Avast.

Dim@rik

[razoreqx]

W32/Pinkslipbot.gen.as

http://www.virustotal.com/file-scan/report.html?id=9f7b01a804dc29d301c169cd292bf6c8cd88b15ca1e0ee35f47c1aee8f3c9b99-1323436044

[Asyn]

W32/Pinkslipbot.gen.as

http://www.virustotal.com/file-scan/report.html?id=9f7b01a804dc29d301c169cd292bf6c8cd88b15ca1e0ee35f47c1aee8f3c9b99-1323436044

Nice catch..!

[razoreqx]

http://www.virustotal.com/file-scan/report.html?id=305c4e7165d53f37fe537c53c9067518dcc069e55f58473fcba607c5b5d665ba-1323451619

Rogue.FakeHDD

[polonus]

Hi razoreqx,

Same category: http://www.virustotal.com/file-scan/report.html?id=e4e269d9ad00071607b85105055b223b781fc7ab0f0df70f79f084ae0d639304-1323464483
See this analysis, based on same MD5 hash: http://camas.comodo.com/cgi-bin/submit?file=e4e269d9ad00071607b85105055b223b781fc7ab0f0df70f79f084ae0d639304

This is how DrWeb's URL scanner detected this malware:
Checking: -http://46.166.157.31/up_4.exe
Engine version: 5.0.2.3300
Total virus-finding records: 2910580
File size: 169.50 KB
File MD5: 0f38403648d34e9987abf501af245973

-http://46.166.157.31/up_4.exe packed by UPX
>-http://46.166.157.31/up_4.exe infected with BackDoor.IRC.NgrBot.42

reported to virus AT avast dot com,

polonus

[REDACTED]

Winlock aka Ransom


http://www.virustotal.com/file-scan/report.html?id=9533fad13324e0aa16ec9d7250753a28ea7ec1972c946c0dd9eb502ffd73372d-1323503872

http://www.virustotal.com/file-scan/report.html?id=b71cc22b75dde1610ba065151f87735d2715c4d4414846a68aca9b59dae9874b-1323504047

http://www.virustotal.com/file-scan/report.html?id=4b5a061be2f901a13ecb6b53cb3bf5ba111ae5cf53187cd7fae496d6822040ab-1323545076

http://www.virustotal.com/file-scan/report.html?id=cc8b56624eb01e5b1ed97176beee1069a0feedd3a889df726797b22e63efb8f1-1323545889

reported to virus AT avast dot com

[razoreqx]

http://www.virustotal.com/file-scan/report.html?id=afe2dad20ed7197d4c5ea434754a8244ab74dca897eed1be406c49312410911f-1323690671


Win32/Kryptik.XDF


Sample uploaded