http://images.minifile.us/image.php

[Malekal_morte]

Juste pour signaler que la variante hxxp://images.minifile.us/image.php (voir http://forum.malekal.com/viewtopic.php? ... =60#p94961) se propage par des messages en français :

HAHA hxxp://images.minifile.us/image.php?id=
Regarde Hahaha . ceci ! hxxp://images.minifile.us/image.php?id=
est-ce vraiment vous? hxxp://images.minifile.us/image.php?id=

Pour supprimer, utilisez MSNFix ou SDFix.

[Malekal_morte]

Message de propagation :

who the f*ck did this?!? hxxtp://images.minifile.us/image.php?id=

Complete scanning result of "image.php", processed in VirusTotal at 07/08/2008 17:09:47 (CET).

[ file data ]
* name..: image.php
* size..: 53760
* md5...: 5b96da1d0b97b0ce65d1d65122998f5b
* sha1..: ef940330e3659b26e0edda5d974cc99de79088db
* peid..: BobSoft Mini Delphi -> BoB / BobSoft

[ scan result ]
AhnLab-V3 2008.7.8.0/20080708 found nothing
AntiVir 7.8.0.64/20080708 found [TR/Crypt.CFI.Gen]
Authentium 5.1.0.4/20080707 found [W32/Document-disguised-based!Maximus]
Avast 4.8.1195.0/20080708 found nothing
AVG 7.5.0.516/20080708 found nothing
BitDefender 7.2/20080708 found nothing
CAT-QuickHeal 9.50/20080708 found nothing
ClamAV 0.93.1/20080708 found nothing
DrWeb 4.44.0.09170/20080708 found nothing
eSafe 7.0.17.0/20080708 found nothing
eTrust-Vet 31.6.5937/20080708 found nothing
Ewido 4.0/20080708 found nothing
F-Prot 4.4.4.56/20080707 found [W32/Document-disguised-based!Maximus]
F-Secure 7.60.13501.0/20080708 found nothing
Fortinet 3.14.0.0/20080708 found nothing
GData 2.0.7306.1023/20080708 found nothing
Ikarus T3.1.1.26.0/20080708 found [VirTool.Win32.DelfInject.AF]
Kaspersky 7.0.0.125/20080708 found nothing
McAfee 5333/20080707 found nothing
Microsoft 1.3704/20080708 found [VirTool:Win32/DelfInject.gen!AF]
NOD32v2 3250/20080708 found nothing
Norman 5.80.02/20080708 found nothing
Panda 9.0.0.4/20080708 found nothing
Prevx1 V2/20080708 found nothing
Rising 20.52.12.00/20080708 found nothing
Sophos 4.31.0/20080708 found nothing
Sunbelt 3.1.1509.1/20080704 found nothing
Symantec 10/20080708 found nothing
TheHacker 6.2.96.374/20080707 found nothing
TrendMicro 8.700.0.1004/20080708 found nothing
VBA32 3.12.6.8/20080707 found nothing
VirusBuster 4.5.11.0/20080708 found nothing
Webwasher-Gateway 6.6.2/20080708 found [Trojan.Crypt.CFI.Gen]

[Malekal_morte]

Ajouté en Trojan.Win32.Delf.ddv par Kaspersky :

Hello,

image.php - Trojan.Win32.Delf.ddv

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

[Malekal_morte]

Scan au lendemain :

Complete scanning result of "image.php", processed in VirusTotal at 07/09/2008 11:16:11 (CET).

[ file data ]
* name: image.php
* size: 53760
* md5.: 5b96da1d0b97b0ce65d1d65122998f5b
* sha1: ef940330e3659b26e0edda5d974cc99de79088db
* peid..: BobSoft Mini Delphi -> BoB / BobSoft

[ scan result ]
AhnLab-V3 2008.7.9.1/20080709 found nothing
AntiVir 7.8.0.64/20080709 found [TR/Crypt.CFI.Gen]
Authentium 5.1.0.4/20080708 found [W32/Document-disguised-based!Maximus]
Avast 4.8.1195.0/20080708 found nothing
AVG 7.5.0.516/20080708 found [Dropper.Delf.BCT]
BitDefender 7.2/20080709 found nothing
CAT-QuickHeal 9.50/20080708 found nothing
ClamAV 0.93.1/20080709 found nothing
DrWeb 4.44.0.09170/20080709 found nothing
eSafe 7.0.17.0/20080703 found nothing
eTrust-Vet 31.6.5940/20080709 found nothing
Ewido 4.0/20080708 found nothing
F-Prot 4.4.4.56/20080708 found [W32/Document-disguised-based!Maximus]
F-Secure 7.60.13501.0/20080708 found nothing
Fortinet 3.14.0.0/20080709 found nothing
GData 2.0.7306.1023/20080709 found [Trojan.Win32.Delf.ddv]
Ikarus T3.1.1.26/20080709 found [VirTool.Win32.DelfInject.AF]
Kaspersky 7.0.0.125/20080709 found [Trojan.Win32.Delf.ddv]
McAfee 5334/20080708 found nothing
Microsoft 1.3704/20080709 found [VirTool:Win32/DelfInject.gen!AF]
NOD32v2 3253/20080709 found nothing
Norman 5.80.02/20080708 found nothing
Panda 9.0.0.4/20080708 found nothing
Prevx1 V2/20080709 found nothing
Rising 20.52.12.00/20080708 found nothing
Sophos 4.31.0/20080709 found nothing
Sunbelt 3.1.1509.1/20080704 found nothing
Symantec 10/20080709 found nothing
TheHacker 6.2.96.374/20080707 found nothing
TrendMicro 8.700.0.1004/20080709 found nothing
VBA32 3.12.6.8/20080708 found nothing
VirusBuster 4.5.11.0/20080708 found nothing
Webwasher-Gateway 6.6.2/20080709 found [Trojan.Crypt.CFI.Gen]