www.msngalery.com

[Malekal_morte]

Se propage par le message :

elams bu resim seninmi http://www.msngalery.com/viewimage.php?id=..

Déjà vu ici : http://forum.malekal.com/viewtopic.php? ... =60#p94847

Pas plus d'informations pour le moment.


Scan du fichier :

Complete scanning result of "viewimage.php", processed in VirusTotal at 07/01/2008 14:54:07 (CET).

[ file data ]
* name..: viewimage.php
* size..: 372224
* md5...: d2cf6e786ccffeba02c873d100f3854b
* sha1..: 488c0a049f2df5fa763691e2f4a96b34a58b0230
* peid..: -

[ scan result ]
AhnLab-V3 2008.7.1.0/20080701 found nothing
AntiVir 7.8.0.59/20080701 found [Worm/SdBot.372224]
Authentium 5.1.0.4/20080701 found nothing
Avast 4.8.1195.0/20080630 found [Win32:Trojan-gen {Other}]
AVG 7.5.0.516/20080701 found [Generic_c.QQI]
BitDefender 7.2/20080701 found [MemScan:Backdoor.SDBot.DFRZ]
CAT-QuickHeal 9.50/20080630 found [(Suspicious) - DNAScan]
ClamAV 0.93.1/20080701 found [PUA.Packed.Themida]
DrWeb 4.44.0.09170/20080701 found nothing
eSafe 7.0.17.0/20080630 found nothing
eTrust-Vet 31.6.5917/20080701 found nothing
Ewido 4.0/20080627 found nothing
F-Prot 4.4.4.56/20080701 found nothing
F-Secure 7.60.13501.0/20080701 found [SDBot.gen8]
Fortinet 3.14.0.0/20080701 found [PossibleThreat]
GData 2.0.7306.1023/20080701 found [Win32:Trojan-gen ]
Ikarus T3.1.1.26.0/20080701 found [BehavesLikeWin32.ExplorerHijack]
Kaspersky 7.0.0.125/20080701 found nothing
McAfee 5328/20080630 found nothing
Microsoft 1.3704/20080701 found [Worm:Win32/Pushbot.gen]
NOD32v2 3231/20080701 found [a variant of Win32/Packed.Themida]
Norman 5.80.02/20080630 found [SDBot.gen8]
Panda 9.0.0.4/20080701 found nothing
Prevx1 V2/20080701 found [Suspicious]
Rising 20.51.12.00/20080701 found nothing
Sophos 4.30.0/20080701 found [Sus/ComPack]
Sunbelt 3.1.1509.1/20080701 found nothing
Symantec 10/20080701 found [W32.Mimbot.B]
TheHacker 6.2.96.365/20080701 found [W32/Behav-Heuristic-064]
TrendMicro 8.700.0.1004/20080701 found nothing
VBA32 3.12.6.8/20080630 found nothing
VirusBuster 4.5.11.0/20080630 found [Packed/Themida]
Webwasher-Gateway 6.6.2/20080701 found [Worm.SdBot.372224]

[Malekal_morte]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
* Windows UDP Control Center = "winudpmgr.exe"

Complete scanning result of "viewimage.php", processed in VirusTotal at 07/04/2008 18:13:10 (CET).

[ file data ]
* name..: viewimage.php
* size..: 74240
* md5...: d18db172860ca427a375822b316cdf81
* sha1..: 52543435434b546d51700e544e71e258eb18de60
* peid..: -

[ scan result ]
AhnLab-V3 2008.7.4.1/20080704 found nothing
AntiVir 7.8.0.64/20080704 found [TR/Delf.Inject.E.10]
Authentium 5.1.0.4/20080704 found nothing
Avast 4.8.1195.0/20080704 found nothing
AVG 7.5.0.516/20080703 found [Generic10.AXPL]
BitDefender 7.2/20080704 found [Trojan.Delf.Inject.E]
CAT-QuickHeal 9.50/20080704 found nothing
ClamAV 0.93.1/20080704 found nothing
DrWeb 4.44.0.09170/20080704 found nothing
eSafe 7.0.17.0/20080703 found nothing
eTrust-Vet 31.6.5927/20080704 found nothing
Ewido 4.0/20080704 found nothing
F-Prot 4.4.4.56/20080703 found nothing
F-Secure 7.60.13501.0/20080703 found nothing
Fortinet 3.14.0.0/20080704 found nothing
GData 2.0.7306.1023/20080704 found nothing
Ikarus T3.1.1.26.0/20080704 found nothing
Kaspersky 7.0.0.125/20080704 found [Heur.Trojan.Generic]
McAfee 5332/20080704 found nothing
Microsoft 1.3704/20080704 found [Worm:Win32/Pushbot.gen]
NOD32v2 3243/20080704 found nothing
Norman 5.80.02/20080704 found nothing
Panda 9.0.0.4/20080703 found [Suspicious file]
Prevx1 V2/20080704 found nothing
Rising 20.51.42.00/20080704 found nothing
Sophos 4.31.0/20080704 found [Troj/KCryDr-A]
Sunbelt 3.1.1509.1/20080704 found nothing
Symantec 10/20080704 found nothing
TheHacker 6.2.96.370/20080704 found nothing
TrendMicro 8.700.0.1004/20080704 found nothing
VBA32 3.12.6.8/20080703 found [suspected of Backdoor.xBot.1 (paranoid heuristics)]
VirusBuster 4.5.11.0/20080704 found nothing
Webwasher-Gateway 6.6.2/20080704 found [Trojan.Delf.Inject.E.10]