Trojan-Dropper.Win32.Agent.cmo (img382.jpeg-www.myspace.com)

par **Malekal_morte** » 06 nov. 2007 00:30

Nouvelle infection MSN, se propage via les messages :

WoW? is that really you... what the hell where you drinking
LOL, you look so ugly in this picture, no joke...
Should I put this on facebook/myspace?
Hey m8, who is this on the right, in this picture...
Sup, seen the pictures from the other night?

Ajoute les fichiers :

C:\WINDOWS\img4851.zip
C:\WINDOWS\sfhgj.exe

Ajoute la clef :

O4 - HKLM\..\Run: [Audio Device Manager] sfhgj.exe

File img382.jpeg-www.myspace.com received on 11.06.2007 00:18:09 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 13/32 (40.63%)

Antivirus Version Last Update Result
AhnLab-V3 2007.11.6.0 2007.11.05 -
AntiVir 7.6.0.30 2007.11.05 -
Authentium 4.93.8 2007.11.05 -
Avast 4.7.1074.0 2007.11.05 -
AVG 7.5.0.503 2007.11.05 Dropper.Agent.FOM
BitDefender 7.2 2007.11.06 -
CAT-QuickHeal 9.00 2007.11.05 -
ClamAV 0.91.2 2007.11.05 -
DrWeb 4.44.0.09170 2007.11.05 -
eSafe 7.0.15.0 2007.10.28 -
eTrust-Vet 31.2.5270 2007.11.05 Win32/Pushbot.AP
Ewido 4.0 2007.11.05 Dropper.Agent.chm
FileAdvisor 1 2007.11.06 -
Fortinet 3.11.0.0 2007.10.19 -
F-Prot 4.4.2.54 2007.11.05 -
F-Secure 6.70.13030.0 2007.11.05 Trojan-Dropper.Win32.Agent.cmo
Ikarus T3.1.1.12 2007.11.05 Trojan-Dropper.Win32.Agent.chm
Kaspersky 7.0.0.125 2007.11.06 Trojan-Dropper.Win32.Agent.cmo
McAfee 5156 2007.11.05 W32/Spybot.worm.gen.r
Microsoft 1.2908 2007.11.05 TrojanDropper:Win32/Delf
NOD32v2 2637 2007.11.06 -
Norman 5.80.02 2007.11.05 W32/Malware.BEFF
Panda 9.0.0.4 2007.11.05 Trj/Agent.GWU
Prevx1 V2 2007.11.06 -
Rising 20.17.01.00 2007.11.05 Trojan.DL.Win32.Agent.zsd
Sophos 4.23.0 2007.11.05 Mal/Generic-A
Sunbelt 2.2.907.0 2007.11.02 -
Symantec 10 2007.11.06 -
TheHacker 6.2.9.116 2007.11.05 -
VBA32 3.12.2.4 2007.11.05 Trojan-Dropper.Win32.Agent.chm
VirusBuster 4.3.26:9 2007.11.05 -
Webwasher-Gateway 6.0.1 2007.11.05 -
Additional information
File size: 36864 bytes
MD5: 9108f04b440a5e766f404aa63a502a37
SHA1: b0b1b0a1007d7894ef5b05f835f62f98ec656ab2