Nouvelle variante qui fait télécharger le fichier : photos-webcam2007.zip
à l'intérieur se trouve : photos_2007.scr
L'infection ajoute les lignes :
O21 - SSODL: modems - {45B8FBC4-9ABB-45EF-9B37-3FADF32B9635} - notice.dll (file missing)
O21 - SSODL: modems - {6765DF25-9FE1-48FA-A1D5-3526ACC1EE42} - notice.dll (file missing)
O21 - SSODL: modems - {6765DF25-9FE1-48FA-A1D5-3526ACC1EE42} - notice.dll (file missing)
File photos_2007.scr received on 07.29.2007 15:44:26 (CET)
You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
Email:
Antivirus Version Last Update Result
AhnLab-V3 2007.7.28.0 2007.07.27 -
AntiVir 7.4.0.50 2007.07.28 -
Authentium 4.93.8 2007.07.27 -
Avast 4.7.997.0 2007.07.29 -
AVG 7.5.0.476 2007.07.28 -
BitDefender 7.2 2007.07.29 -
CAT-QuickHeal 9.00 2007.07.28 (Suspicious) - DNAScan
ClamAV 0.91 2007.07.29 -
DrWeb 4.33 2007.07.29 -
eSafe 7.0.15.0 2007.07.24 Suspicious Trojan/Worm
eTrust-Vet 31.1.5010 2007.07.28 -
Ewido 4.0 2007.07.29 -
FileAdvisor 1 2007.07.29 -
Fortinet 2.91.0.0 2007.07.29 -
F-Prot 4.3.2.48 2007.07.27 -
F-Secure 6.70.13030.0 2007.07.29 -
Ikarus T3.1.1.8 2007.07.29 -
Kaspersky 4.0.2.24 2007.07.29 -
McAfee 5085 2007.07.27 -
Microsoft 1.2704 2007.07.29 -
NOD32v2 2427 2007.07.28 probably unknown NewHeur_PE virus
Norman 5.80.02 2007.07.27 -
Panda 9.0.0.4 2007.07.29 Suspicious file
Rising 19.33.62.00 2007.07.29 -
Sophos 4.19.0 2007.07.26 -
Sunbelt 2.2.907.0 2007.07.28 -
Symantec 10 2007.07.29 -
TheHacker 6.1.7.156 2007.07.29 -
VBA32 3.12.2.1 2007.07.29 -
VirusBuster 4.3.26:9 2007.07.28 -
Webwasher-Gateway 6.0.1 2007.07.29 Win32.Malware.gen (suspicious)
Additional information
File size: 118272 bytes
MD5: 71b015411d27794c3e900707ef21e6e7
SHA1: 934b80b2bfbb744933ad9de35bc2b588c852d08e
packers: NTKrnl