Message de propagation :
How about u look at this new pic and tell me what u think?
Tell me what do you think of this new pic of me plz :]
Are you familiar with these guys? I think you know em check out the pic
did u go to this place? accept the pic I think I saw u there once!
I accidentally broke my hand yesterday omg look at it :(
Let me know if u like this funny picture, I edited it for a friend looks funny
have u ever seen my funniest picture? accept this you will love it haha
L'infection ajoute la ligne suivante sur HijackThis :
O4 - HKLM\..\Run: [Symantec Licensing Svc] symlsrv.exe
Fichier x004.exe reçu le 2008.09.11 10:51:58 (CET)
Situation actuelle: terminé
Résultat: 8/36 (22.22%)
Formaté Formaté
Impression des résultats Impression des résultats
Antivirus Version Dernière mise à jour Résultat
AhnLab-V3 2008.9.6.0 2008.09.11 -
AntiVir 7.8.1.28 2008.09.11 TR/Crypt.CFI.Gen
Authentium 5.1.0.4 2008.09.11 -
Avast 4.8.1195.0 2008.09.10 -
AVG 8.0.0.161 2008.09.10 Dropper.Generic.ABDF
BitDefender 7.2 2008.09.11 -
CAT-QuickHeal 9.50 2008.09.11 -
ClamAV 0.93.1 2008.09.11 -
DrWeb 4.44.0.09170 2008.09.11 Win32.HLLW.Autoruner.2685
eSafe 7.0.17.0 2008.09.10 -
eTrust-Vet 31.6.6083 2008.09.10 Win32/Slenfbot!generic
Ewido 4.0 2008.09.10 -
F-Prot 4.4.4.56 2008.09.10 -
F-Secure 8.0.14332.0 2008.09.11 -
Fortinet 3.113.0.0 2008.09.11 -
GData 19 2008.09.11 -
Ikarus T3.1.1.34.0 2008.09.11 VirTool.Win32.DelfInject.AF
K7AntiVirus 7.10.450 2008.09.10 -
Kaspersky 7.0.0.125 2008.09.11 -
McAfee 5381 2008.09.10 -
Microsoft 1.3903 2008.09.11 VirTool:Win32/Injector.gen!D
NOD32v2 3429 2008.09.09 a variant of Win32/Injector.CR
Norman 5.80.02 2008.09.10 -
Panda 9.0.0.4 2008.09.10 -
PCTools 4.4.2.0 2008.09.10 -
Prevx1 V2 2008.09.11 -
Rising 20.61.31.00 2008.09.11 -
Sophos 4.33.0 2008.09.11 -
Sunbelt 3.1.1624.1 2008.09.11 -
Symantec 10 2008.09.11 -
TheHacker 6.3.0.9.077 2008.09.10 -
TrendMicro 8.700.0.1004 2008.09.11 -
VBA32 3.12.8.5 2008.09.10 -
ViRobot 2008.9.11.1372 2008.09.11 -
VirusBuster 4.5.11.0 2008.09.10 -
Webwasher-Gateway 6.6.2 2008.09.11 Trojan.Crypt.CFI.Gen
Information additionnelle
File size: 78336 bytes
MD5...: a62ce897a9fa609612a5a4f04023213b
SHA1..: 87c4bcd34264d8ace007d3737dbbe6980a09d264