CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
Donations. Become Premium Today! Premium Icon
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Login to check your private messagesLogin to check your private messages   LoginLogin   Your Favorite ForumsSelect FavForums 

more zlob stuff

 
Post new topic   Reply to topic       All -> FavForums -> Unknown Files [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
sjpritch25

1st Responder
Premium Member

Joined: Mar 31, 2005
Posts: 5163
Location: West Coast of Florida, USA
1st Responder Mentors 1st Responders MVP Premium Rootkit Responders

PostPosted: Tue Feb 26, 2008 4:25 am    Post subject: more zlob stuff
Reply with quote

File KernelKernel.dll received on 02.26.2008 05:02:43 (CET)

Result: 6/32 (18.75%)

Antivirus Version Last Update Result
AhnLab-V3 2008.2.22.0 2008.02.26 -
AntiVir 7.6.0.67 2008.02.25 TR/Crypt.XPACK.Gen
Authentium 4.93.8 2008.02.26 -
Avast 4.7.1098.0 2008.02.25 -
AVG 7.5.0.516 2008.02.26 -
BitDefender 7.2 2008.02.26 -
CAT-QuickHeal 9.50 2008.02.26 -
ClamAV 0.92.1 2008.02.26 -
DrWeb 4.44.0.09170 2008.02.25 -
eSafe 7.0.15.0 2008.02.26 -
eTrust-Vet 31.3.5563 2008.02.26 -
Ewido 4.0 2008.02.25 -
FileAdvisor 1 2008.02.26 -
Fortinet 3.14.0.0 2008.02.25 -
F-Prot 4.4.2.54 2008.02.25 -
F-Secure 6.70.13260.0 2008.02.26 -
Ikarus T3.1.1.20 2008.02.26 BehavesLikeTrojan.ShellObject
Kaspersky 7.0.0.125 2008.02.26 Heur.Trojan.Generic
McAfee 5237 2008.02.25 -
Microsoft 1.3204 2008.02.26 -
NOD32v2 2901 2008.02.25 -
Norman 5.80.02 2008.02.25 W32/Smalltroj.CWNE
Panda 9.0.0.4 2008.02.25 -
Prevx1 V2 2008.02.26 Downloader.Zlob
Rising 20.33.02.00 2008.02.25 -
Sophos 4.27.0 2008.02.26 -
Sunbelt 3.0.893.0 2008.02.23 -
Symantec 10 2008.02.26 -
TheHacker 6.2.9.229 2008.02.25 -
VBA32 3.12.6.2 2008.02.26 -
VirusBuster 4.3.26:9 2008.02.25 -
Webwasher-Gateway 6.6.2 2008.02.25 Trojan.Crypt.XPACK.Gen
Additional information
File size: 17958 bytes
MD5: e396864d597b582122da5358d4fb83b3
SHA1: e8dcd7844f18fcfb7c1ba8e2d0b29dd34d88d8fc
PEiD: -
Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=0D9948222665C338467300B103C10A0063DB672C


File VolumeDrv.dll received on 02.26.2008 05:03:08 (CET)

Result: 6/32 (18.75%)

Antivirus Version Last Update Result
AhnLab-V3 2008.2.22.0 2008.02.26 -
AntiVir 7.6.0.67 2008.02.25 TR/Crypt.XPACK.Gen
Authentium 4.93.8 2008.02.26 -
Avast 4.7.1098.0 2008.02.25 -
AVG 7.5.0.516 2008.02.26 -
BitDefender 7.2 2008.02.26 -
CAT-QuickHeal 9.50 2008.02.26 -
ClamAV 0.92.1 2008.02.26 -
DrWeb 4.44.0.09170 2008.02.25 -
eSafe 7.0.15.0 2008.02.26 -
eTrust-Vet 31.3.5563 2008.02.26 -
Ewido 4.0 2008.02.25 -
FileAdvisor 1 2008.02.26 -
Fortinet 3.14.0.0 2008.02.25 -
F-Prot 4.4.2.54 2008.02.25 -
F-Secure 6.70.13260.0 2008.02.26 -
Ikarus T3.1.1.20 2008.02.26 BehavesLikeTrojan.ShellObject
Kaspersky 7.0.0.125 2008.02.26 Heur.Trojan.Generic
McAfee 5237 2008.02.25 -
Microsoft 1.3204 2008.02.26 -
NOD32v2 2901 2008.02.25 -
Norman 5.80.02 2008.02.25 W32/Smalltroj.CWNE
Panda 9.0.0.4 2008.02.25 -
Prevx1 V2 2008.02.26 Downloader.Zlob
Rising 20.33.02.00 2008.02.25 -
Sophos 4.27.0 2008.02.26 -
Sunbelt 3.0.893.0 2008.02.23 -
Symantec 10 2008.02.26 -
TheHacker 6.2.9.229 2008.02.25 -
VBA32 3.12.6.2 2008.02.26 -
VirusBuster 4.3.26:9 2008.02.25 -
Webwasher-Gateway 6.6.2 2008.02.25 Trojan.Crypt.XPACK.Gen
Additional information
File size: 17958 bytes
MD5: 4782d374889704c8e9817d257323fd7d
SHA1: 2de7fe02130d6f4f09073ddbf16cb2e9189799ba
PEiD: -
Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=0D9948222665C33846730068C0769D00BA18D0BB


_________________
Microsoft Valuable Professional--Consumer Security 2007-2009 image
image
http://geekfox26.blogspot.com/
Back to top
View users profile Send private message Visit posters website
tetak

MIRT Team Lead
Premium Member

Joined: Jan 19, 2007
Posts: 5879

MIRT Premium

PostPosted: Tue Feb 26, 2008 10:23 pm    Post subject:
Reply with quote

Both files have been added to the malware listserv.


_________________
Got Windows XP? Help protect your PC from malware with Microsofts anti-spyware program Windows Defender.

Download it for free from http://www.microsoft.com/athome/security/spyware/software/default.mspx
Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Unknown Files All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You cannot download files in this forum


Powered by phpBB © 2001 phpBB Group
2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
Acceptable Use Policy. Use signifies your agreement.
124ppm 0.211s (0.052s)
Making cybercriminals unhappy since 2002*
In Memory of Trpm
spacer spacer