CastleCops® New vundo zlob related stuff

Need help? Click here to register for free! Absolutely zero advertisements on this site!

	Donation/Premium

	Donations. Become Premium Today!

	Security Central

	· Home · PIRT/Fried Phish · MIRT · SIRT · Deutsch · Wiki · Newsletter · O16/ActiveX · CLSID List · Contest2007 · Downloads · Feedback (send) · Forums · HijackThis · Hijacktrend · LSPs · My Downloads · O18 · O20 · O21 · O22 · O23 · O9 · Premium · Private Messages · Proxomitron · Reviews · Search · StartupList · Stories Archive · Submit News · WsIRT · Your Account · Acceptable Use Policy

Forum FAQ

Usergroups

Profile

Select FavForums

New vundo zlob related stuff

All -> FavForums -> Unknown Files

[del.icio.us!] [digg it!] [reddit!]

View previous topic :: View next topic

Author

Message

sjpritch25

1st Responder
Premium Member

Joined: Mar 31, 2005
Posts: 5163
Location: West Coast of Florida, USA

Posted: Tue Mar 04, 2008 2:51 am Post subject: New vundo zlob related stuff

File vgdujkzg.dll received on 03.04.2008 03:37:57 (CET) Result: 3/32 (9.38%) Antivirus Version Last Update Result AhnLab-V3 2008.3.4.0 2008.03.03 - AntiVir 7.6.0.73 2008.03.03 HEUR/Crypted Authentium 4.93.8 2008.03.04 - Avast 4.7.1098.0 2008.03.03 - AVG 7.5.0.516 2008.03.03 - BitDefender 7.2 2008.03.03 - CAT-QuickHeal 9.50 2008.03.03 - ClamAV 0.92.1 2008.03.04 - DrWeb 4.44.0.09170 2008.03.03 - eSafe 7.0.15.0 2008.02.28 - eTrust-Vet 31.3.5584 2008.03.03 - Ewido 4.0 2008.03.03 - FileAdvisor 1 2008.03.04 - Fortinet 3.14.0.0 2008.03.03 - F-Prot 4.4.2.54 2008.03.03 - F-Secure 6.70.13260.0 2008.03.03 - Ikarus T3.1.1.20 2008.03.04 - Kaspersky 7.0.0.125 2008.03.04 - McAfee 5243 2008.03.03 - Microsoft 1.3301 2008.03.03 Trojan:Win32/Virtumonde.R NOD32v2 2919 2008.03.04 - Norman 5.80.02 2008.03.03 - Panda 9.0.0.4 2008.03.03 - Prevx1 V2 2008.03.04 - Rising 20.34.02.00 2008.03.03 - Sophos 4.27.0 2008.03.04 - Sunbelt 3.0.906.0 2008.02.28 - Symantec 10 2008.03.04 - TheHacker 6.2.92.232 2008.03.04 - VBA32 3.12.6.2 2008.02.27 - VirusBuster 4.3.26:9 2008.03.03 - Webwasher-Gateway 6.6.2 2008.03.04 Heuristic.Crypted Additional information File size: 184320 bytes MD5: 8563f2aa8397aa77d592713f21a5a582 SHA1: 8f144a0d40ddad3ee643f7b1343252a937cee8bc PEiD: - File gtqbspmh.dll received on 03.04.2008 03:37:13 (CET) Result: 7/32 (21.88%) Antivirus Version Last Update Result AhnLab-V3 2008.3.4.0 2008.03.03 - AntiVir 7.6.0.73 2008.03.03 TR/Vundo.Gen Authentium 4.93.8 2008.03.04 - Avast 4.7.1098.0 2008.03.03 Win32:Obfuscated-DCS AVG 7.5.0.516 2008.03.03 Lop BitDefender 7.2 2008.03.03 Generic.Otuboh.4D029CC8 CAT-QuickHeal 9.50 2008.03.03 - ClamAV 0.92.1 2008.03.04 - DrWeb 4.44.0.09170 2008.03.03 - eSafe 7.0.15.0 2008.02.28 - eTrust-Vet 31.3.5584 2008.03.03 - Ewido 4.0 2008.03.03 - FileAdvisor 1 2008.03.04 - Fortinet 3.14.0.0 2008.03.03 - F-Prot 4.4.2.54 2008.03.03 - F-Secure 6.70.13260.0 2008.03.03 - Ikarus T3.1.1.20 2008.03.04 - Kaspersky 7.0.0.125 2008.03.04 Trojan.Win32.Obfuscated.gx McAfee 5243 2008.03.03 - Microsoft 1.3301 2008.03.03 Trojan:Win32/Virtumonde.R NOD32v2 2919 2008.03.04 - Norman 5.80.02 2008.03.03 - Panda 9.0.0.4 2008.03.03 - Prevx1 V2 2008.03.04 - Rising 20.34.02.00 2008.03.03 - Sophos 4.27.0 2008.03.04 - Sunbelt 3.0.906.0 2008.02.28 - Symantec 10 2008.03.04 - TheHacker 6.2.92.232 2008.03.04 - VBA32 3.12.6.2 2008.02.27 - VirusBuster 4.3.26:9 2008.03.03 - Webwasher-Gateway 6.6.2 2008.03.04 Trojan.Vundo.Gen Additional information File size: 102400 bytes MD5: 196dc155c64cc1e480cf3b8aab59b297 SHA1: 5dcb228cba96dbfd936a4160d465cf3e082538f4 PEiD: - File perupuhc.exe received on 03.04.2008 03:37:29 (CET) Result: 4/32 (12.5%) Antivirus Version Last Update Result AhnLab-V3 2008.3.4.0 2008.03.03 - AntiVir 7.6.0.73 2008.03.03 TR/Crypt.XPACK.Gen Authentium 4.93.8 2008.03.04 Possibly a new variant of W32/CrazyCrunch-based!Maximus Avast 4.7.1098.0 2008.03.03 - AVG 7.5.0.516 2008.03.03 - BitDefender 7.2 2008.03.03 - CAT-QuickHeal 9.50 2008.03.03 - ClamAV 0.92.1 2008.03.04 - DrWeb 4.44.0.09170 2008.03.03 - eSafe 7.0.15.0 2008.02.28 - eTrust-Vet 31.3.5584 2008.03.03 - Ewido 4.0 2008.03.03 - FileAdvisor 1 2008.03.04 - Fortinet 3.14.0.0 2008.03.03 - F-Prot 4.4.2.54 2008.03.03 - F-Secure 6.70.13260.0 2008.03.03 - Ikarus T3.1.1.20 2008.03.04 - Kaspersky 7.0.0.125 2008.03.04 Trojan.Win32.Obfuscated.gx McAfee 5243 2008.03.03 - Microsoft 1.3301 2008.03.03 - NOD32v2 2919 2008.03.04 - Norman 5.80.02 2008.03.03 - Panda 9.0.0.4 2008.03.03 - Prevx1 V2 2008.03.04 - Rising 20.34.02.00 2008.03.03 - Sophos 4.27.0 2008.03.04 - Sunbelt 3.0.906.0 2008.02.28 - Symantec 10 2008.03.04 - TheHacker 6.2.92.232 2008.03.04 - VBA32 3.12.6.2 2008.02.27 - VirusBuster 4.3.26:9 2008.03.03 - Webwasher-Gateway 6.6.2 2008.03.04 Trojan.Crypt.XPACK.Gen Additional information File size: 53248 bytes MD5: 4e16fa2bb4c191a182799dc989f5ff0b SHA1: ebef3d03079d0244fa2b73d07b152868cf9b5ff2 PEiD: - File gnutqteb.exe received on 03.04.2008 03:36:50 (CET) Result: 13/31 (41.94%) Antivirus Version Last Update Result AhnLab-V3 2008.3.4.0 2008.03.03 - AntiVir 7.6.0.73 2008.03.03 TR/Crypt.FKM.Gen Authentium 4.93.8 2008.03.04 - Avast 4.7.1098.0 2008.03.03 - AVG 7.5.0.516 2008.03.03 SHeur.AWFM BitDefender 7.2 2008.03.03 Trojan.Renos.NBN CAT-QuickHeal 9.50 2008.03.03 Hoax.Renos.ayn (Not a Virus) ClamAV 0.92.1 2008.03.04 - DrWeb 4.44.0.09170 2008.03.03 Trojan.Fakealert.444 eSafe 7.0.15.0 2008.02.28 suspicious Trojan/Worm eTrust-Vet 31.3.5584 2008.03.03 - Ewido 4.0 2008.03.03 - FileAdvisor 1 2008.03.04 - Fortinet 3.14.0.0 2008.03.03 - F-Prot 4.4.2.54 2008.03.03 - F-Secure 6.70.13260.0 2008.03.03 not-virus:Hoax.Win32.Renos.ayn Ikarus T3.1.1.20 2008.03.04 Trojan.Crypt.FKM Kaspersky 7.0.0.125 2008.03.04 not-virus:Hoax.Win32.Renos.ayn McAfee 5243 2008.03.03 - Microsoft 1.3301 2008.03.03 - NOD32v2 2919 2008.03.04 - Norman 5.80.02 2008.03.03 - Panda 9.0.0.4 2008.03.03 - Prevx1 V2 2008.03.04 Generic.Malware Rising 20.34.02.00 2008.03.03 - Sophos 4.27.0 2008.03.04 Sus/Behav-1021 Sunbelt 3.0.906.0 2008.02.28 - TheHacker 6.2.92.232 2008.03.04 Aplicacion/Renos.ayn VBA32 3.12.6.2 2008.02.27 - VirusBuster 4.3.26:9 2008.03.03 - Webwasher-Gateway 6.6.2 2008.03.04 Trojan.Crypt.FKM.Gen Additional information File size: 89107 bytes MD5: d0701af63389b75d8c9c7906ec017c7c SHA1: cc52edf1b7aa1b614f6e022e93503e14e444ff24 PEiD: UPX 2.90 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser packers: UPX packers: UPX packers: PE_Patch.UPX, UPX Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=9C7FC3D113BEF1705C420156D25D9200E238B37D File bihkrmdi.dll received on 03.04.2008 03:36:12 (CET) Result: 7/32 (21.88%) Antivirus Version Last Update Result AhnLab-V3 2008.3.4.0 2008.03.03 - AntiVir 7.6.0.73 2008.03.03 TR/Vundo.Gen Authentium 4.93.8 2008.03.04 - Avast 4.7.1098.0 2008.03.03 Win32:Obfuscated-DCS AVG 7.5.0.516 2008.03.03 Lop BitDefender 7.2 2008.03.03 Generic.Otuboh.4D029CC8 CAT-QuickHeal 9.50 2008.03.03 - ClamAV 0.92.1 2008.03.04 - DrWeb 4.44.0.09170 2008.03.03 - eSafe 7.0.15.0 2008.02.28 - eTrust-Vet 31.3.5584 2008.03.03 - Ewido 4.0 2008.03.03 - FileAdvisor 1 2008.03.04 - Fortinet 3.14.0.0 2008.03.03 - F-Prot 4.4.2.54 2008.03.03 - F-Secure 6.70.13260.0 2008.03.03 - Ikarus T3.1.1.20 2008.03.04 - Kaspersky 7.0.0.125 2008.03.04 Trojan.Win32.Obfuscated.gx McAfee 5243 2008.03.03 - Microsoft 1.3301 2008.03.03 Trojan:Win32/Virtumonde.R NOD32v2 2919 2008.03.04 - Norman 5.80.02 2008.03.03 - Panda 9.0.0.4 2008.03.03 - Prevx1 V2 2008.03.04 - Rising 20.34.02.00 2008.03.03 - Sophos 4.27.0 2008.03.04 - Sunbelt 3.0.906.0 2008.02.28 - Symantec 10 2008.03.04 - TheHacker 6.2.92.232 2008.03.04 - VBA32 3.12.6.2 2008.02.27 - VirusBuster 4.3.26:9 2008.03.03 - Webwasher-Gateway 6.6.2 2008.03.04 Trojan.Vundo.Gen Additional information File size: 102400 bytes MD5: 196dc155c64cc1e480cf3b8aab59b297 SHA1: 5dcb228cba96dbfd936a4160d465cf3e082538f4 PEiD: - _________________ Microsoft Valuable Professional--Consumer Security 2007-2009 http://geekfox26.blogspot.com/

sjpritch25

1st Responder
Premium Member

Joined: Mar 31, 2005
Posts: 5163
Location: West Coast of Florida, USA

Posted: Tue Mar 04, 2008 2:55 am Post subject:

Here is the fake security popup _________________ Microsoft Valuable Professional--Consumer Security 2007-2009 http://geekfox26.blogspot.com/

sjpritch25

1st Responder
Premium Member

Joined: Mar 31, 2005
Posts: 5163
Location: West Coast of Florida, USA

Posted: Tue Mar 04, 2008 3:04 am Post subject:

_________________ Microsoft Valuable Professional--Consumer Security 2007-2009 http://geekfox26.blogspot.com/

tetak

MIRT Team Lead
Premium Member

Joined: Jan 19, 2007
Posts: 5879

Posted: Tue Mar 04, 2008 6:23 am Post subject:

All the files have been added to the malware listserv. _________________ Got Windows XP? Help protect your PC from malware with Microsofts anti-spyware program Windows Defender. Download it for free from http://www.microsoft.com/athome/security/spyware/software/default.mspx

	All -> FavForums -> Unknown Files	All times are GMT
Page 1 of 1

You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You cannot download files in this forum


	2002-2008 � Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 157ppm 0.477s (0.065s) Making cybercriminals unhappy since 2002*