Author Topic: False Photobucket Plugin - Win32 Spyeye & More DorkBot Worms  (Read 3349 times)

0 Members and 1 Guest are viewing this topic.

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
« Last Edit: December 10, 2011, 06:05:59 PM by Donovansrb10 »
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."

REDACTED

  • Guest
Re: False Photobucket Plugin - Win32 Spyeye & More DorkBot Worms
« Reply #1 on: December 10, 2011, 06:23:12 PM »
Information From: Malware Database (AMaDa) :: Recent Malware Samples

Spyeye
-http://amada.abuse.ch/?search=184.82.5.84

http://www.virustotal.com/file-scan/report.html?id=4ba5bd67d468b1c778b630fea829740b263f8f1c0fc2dd17151e41ec981c2309-1323518955

Worm.Dorkbot
-http://amada.abuse.ch/?search=46.166.157.31

http://www.virustotal.com/file-scan/report.html?id=e4e269d9ad00071607b85105055b223b781fc7ab0f0df70f79f084ae0d639304-1323464483

http://www.virustotal.com/file-scan/report.html?id=3da8f63181b11ac73f97ee558c24a4746413c9feecfd5e94bbff57432c3ba388-1323534842


photobucket_plugin.exe - Win32:Malware-gen
up_4.exe - Win32:Malware-gen

up_715.exe - (10.12.2011 - 111210-1)- Win32:Malware-gen

46.166.157.31 - Resolved - URL:Mal
« Last Edit: December 10, 2011, 08:27:35 PM by Dim@rik »

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: False Photobucket Plugin - Win32 Spyeye & More DorkBot Worms
« Reply #2 on: December 10, 2011, 06:38:54 PM »
up_715.exe - Sent to Avast

46.166.157.31 - Resolved - URL:Mal

Much appreciated, Dim@rik. :)

Good to know how fast the avast! team is.
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."