http://www.ilariacurcio.com/photo001.exe

[Malekal_morte]

Message de propagation :

En esta galer.ade fotos creo que hay un mont.nde fotos! hxxp://www.ilariacurcio.com/photo001.exe?

L'infection ajoute la ligne suivante sur HijackThis :

O4 - HKLM\..\Run: [Windows Update ] temps.exe

Fichier photo001.exe reçu le 2008.10.23 09:08:40 (CET)
Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE
Résultat: 5/36 (13.89%)

Antivirus Version Dernière mise à jour Résultat
AhnLab-V3 2008.10.22.0 2008.10.23 -
AntiVir 7.9.0.5 2008.10.22 -
Authentium 5.1.0.4 2008.10.23 -
Avast 4.8.1248.0 2008.10.22 -
AVG 8.0.0.161 2008.10.23 BackDoor.Generic10.SAP
BitDefender 7.2 2008.10.23 -
CAT-QuickHeal 9.50 2008.10.23 -
ClamAV 0.93.1 2008.10.23 -
DrWeb 4.44.0.09170 2008.10.23 -
eSafe 7.0.17.0 2008.10.22 -
eTrust-Vet 31.6.6164 2008.10.22 -
Ewido 4.0 2008.10.22 -
F-Prot 4.4.4.56 2008.10.22 -
F-Secure 8.0.14332.0 2008.10.23 -
Fortinet 3.113.0.0 2008.10.22 -
GData 19 2008.10.23 -
Ikarus T3.1.1.44.0 2008.10.23 VirTool.Win32.DelfInject.AC
K7AntiVirus 7.10.503 2008.10.22 -
Kaspersky 7.0.0.125 2008.10.23 -
McAfee 5412 2008.10.23 -
Microsoft 1.4005 2008.10.23 VirTool:Win32/DelfInject.gen!X
NOD32 3547 2008.10.22 -
Norman 5.80.02 2008.10.22 -
Panda 9.0.0.4 2008.10.22 Suspicious file
PCTools 4.4.2.0 2008.10.22 -
Prevx1 V2 2008.10.23 -
Rising 21.00.31.00 2008.10.23 -
SecureWeb-Gateway 6.7.6 2008.10.22 -
Sophos 4.34.0 2008.10.23 -
Sunbelt 3.1.1747.1 2008.10.23 -
Symantec 10 2008.10.23 -
TheHacker 6.3.1.0.124 2008.10.23 -
TrendMicro 8.700.0.1004 2008.10.23 -
VBA32 3.12.8.8 2008.10.22 Trojan-Dropper.Win32.Agent.ybe
ViRobot 2008.10.23.1433 2008.10.23 -
VirusBuster 4.5.11.0 2008.10.22 -
Information additionnelle
File size: 62976 bytes
MD5...: b807518ba06ff4ffc20f7abc28a776b7
SHA1..: 5988d4b7fc18317905c1603f594e4089b0777600

[Malekal_morte]

Antivir :

The file 'photo001.exe' has been determined to be 'MALWARE'. Our analysts named the threat Worm/IrcBot.62976.F. The term "WORM/" denotes a worm that is able to spread itself for instance over the Internet (using eMail, peer-to-peer networks, IRC networks etc.).Detection will be added to our virus definition file (VDF) with one of the next updates.

Kaspersky :

Hello,

photo001.exe_ - Backdoor.Win32.IRCBot.ghk

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

[Malekal_morte]

Nouvelle URL, même fichier

Mira sus fotos en esta galer.a?? hxxp://www.fotogaleria.us/foto011.exe