Backdoor.Win32.IRCBot.byk/MyPhoto51.JPG_ScannedByMcafee.com

Informations sur les arnaques et Virus sur MSN.
Malekal_morte
Messages : 116326
Inscription : 10 sept. 2005 13:57

Backdoor.Win32.IRCBot.byk/MyPhoto51.JPG_ScannedByMcafee.com

par Malekal_morte »

via le zip MyPhoto51.zip contenant le fichier MyPhoto51.JPG_ScannedByMcafee.com

Message de propagation envoyé aux contacts :
Tu n'as pas fait l'ampur avec eux, ou l'as tu fait?
Je pense que j'ai couche avec eux.
Putain, c'est chaud ca!
C'est chaud ca?
Tu vois ces gens fous?On baise presque sur la piste de danse!
Est ce horrible si je me rappelle seulement du sexe?
Tu ne penses pas que j'ai fait l'amour avec eux, pas vrai?
Je pense que j'ai fait l'amour avec eux. Qu'est ce que je dois faire.
Je pense que j'ai couche avec eux.
Ai-je pu coucher avec eux?
checkout my newest pic before I upload!!
hey over there... check out my new photo!
when youre around accept.. its my new default pic.
u seen this crazy shit?
holy shit this new pic is hot as fuck!
I just made this design for a friend. U like it?
I think I had sex with them :X What should i do?
You don't think I had sex with them... rite?
Is it horrible if I only remember the sex?
Is this really a pic of you?
Would you have had a threesome with them?
Wow! I can't believe I had a threesome with them!
You see these crazy people? Almost havin sex on the dance floor!
How hot is this?
Damn this is sexy!
u want to see something really funny? Take a look! I cant stop laughing!
do you like this picture I took?
could I have had sex with them?
new party pictures :) WOW it was insane!
You want to see something insanely funny? accept this. OMG :)
Do you like sexyness? accept this and you will find out ;)
Beer-More Beer-dancing is a bad idea. Look what happaned!
want to see my new pics? Take a look.
I just found this nasty pic.. its just wrong, but you need to see it!
Just look at the new shirt I got ;)
This is my newest webcam.. The pic quality on it alrite?
I think I just found an old picture of you...want it? here it is!
dont freakout when you see this picture
you might scream when you see this picture lol
plz dont kill me for sending you this picture, you've got to see it!
haha this picture of you is HILARIOUS!
let me introduce you to my newest friend :) accept already
Wow I got so fucked last night. Just look at the pic!
just found new myspace pics! here
crazy facebook pics accept ;]
You didn't have sex with them... or did u?
I think I slept with them!
Could I have slept with them?
this person looks like you. It's just freaky.
watch out.. this picture im sending you is sooooo nasty!!
do I look good with this new mix?
Hey! ya wanna see my new pic?
Someone just tagged me in this picture. Man am I wasted.
did I send you my new pic? if not here it is :)
How do we look together?
this picture is so amazing I cannot believe it!!!
want me to tag you in this picture on facebook?
Fucks sake this is really you?
can I add your picture to my new album?
Does my new hair style look good?
checkout the newest faster car.. it is incredible!
do I look good in this picture?
Hi, remember this picture of you? I think u were wasted :X
You look so sexy in this picture!
do you like dogs? Just look at the one my parents adopted.
Damn this is some good pole dancing!
can I post this picture of us to my new blog?
This is so hot I want it badly, just look already!
I got a new car!! look at the pics!
Man this girl got soo fucked last night!
do you know this person on this picture? I think you do ;)
I think you will faint when you see this pic
I was so drunk at this party.. check it out lol
I can't believe I am in this picture look!
My lord last night was crazy. Look at the pic I snapped!
haha you're gonna laugh hard when you see this
I took this pic on my vacation:)
this is so nasty...
I'm pretty sure I just slept with them :X What do i do?
I look so fat in this pic :(
your mom is in this picture lol
I like this picture of you a lot :)
Ajoute la ligne suivante sur HijackThis :
O4 - HKLM\..\Run: [Services Manager!] svmanager.exe
Scan du fichier :
File svmanager.exe received on 03.14.2008 02:21:23 (CET)
Current status: finished
Result: 9/32 (28.12%)
Compact Compact
Print results Print results
Antivirus Version Last Update Result
AhnLab-V3 2008.3.14.0 2008.03.13 -
AntiVir 7.6.0.73 2008.03.13 TR/Crypt.XPACK.Gen
Authentium 4.93.8 2008.03.13 -
Avast 4.7.1098.0 2008.03.13 -
AVG 7.5.0.516 2008.03.13 -
BitDefender 7.2 2008.03.14 Backdoor.IRCBot.ABRC
CAT-QuickHeal 9.50 2008.03.13 -
ClamAV 0.92.1 2008.03.13 -
DrWeb 4.44.0.09170 2008.03.13 BackDoor.IRC.Tiny
eSafe 7.0.15.0 2008.03.09 Suspicious File
eTrust-Vet 31.3.5613 2008.03.13 -
Ewido 4.0 2008.03.13 -
FileAdvisor 1 2008.03.14 -
Fortinet 3.14.0.0 2008.03.13 -
F-Prot 4.4.2.54 2008.03.13 -
F-Secure 6.70.13260.0 2008.03.14 Suspicious:W32/Malware!Gemini
Ikarus T3.1.1.20 2008.03.14 -
Kaspersky 7.0.0.125 2008.03.14 Heur.Trojan.Generic
McAfee 5251 2008.03.13 -
Microsoft 1.3301 2008.03.13 -
NOD32v2 2946 2008.03.14 -
Norman 5.80.02 2008.03.13 -
Panda 9.0.0.4 2008.03.13 Suspicious file
Prevx1 V2 2008.03.14 -
Rising 20.35.32.00 2008.03.13 -
Sophos 4.27.0 2008.03.14 Mal/Emogen-N
Sunbelt 3.0.930.0 2008.03.05 -
Symantec 10 2008.03.14 -
TheHacker 6.2.92.245 2008.03.14 -
VBA32 3.12.6.2 2008.03.13 -
VirusBuster 4.3.26:9 2008.03.13 -
Webwasher-Gateway 6.6.2 2008.03.13 Trojan.Crypt.XPACK.Gen
Additional information
File size: 76800 bytes
MD5: f5e611deb1f265729c7fcb1f98654f19
SHA1: da8e8292bdd2484461e1fb0f18629ecbcbff7932
PEiD: -
packers: EXECryptor
packers: Execryptor
Première règle élémentaire de sécurité : on réfléchit puis on clic et pas l'inverse - Les fichiers/programmes c'est comme les bonbons, quand ça vient d'un inconnu, on n'accepte pas !
Comment protéger son PC des virus
Windows 11 : Compatibilité, Configuration minimale requise, télécharger ISO et installer Windows 11

Comment demander de l'aide sur le forum
Evaluer le site malekal.com
Partagez malekal.com : n'hésitez pas à partager les articles qui vous plaisent sur la page Facebook du site.
Malekal_morte
Messages : 116326
Inscription : 10 sept. 2005 13:57

Re: MyPhoto51.JPG_ScannedByMcafee.com

par Malekal_morte »

Ajoute en Backdoor.Win32.IRCBot.byk par Kaspersky.

Hello,

svmanager.exed - Backdoor.Win32.IRCBot.byk

This file is already detected. Please update your antivirus bases.
Première règle élémentaire de sécurité : on réfléchit puis on clic et pas l'inverse - Les fichiers/programmes c'est comme les bonbons, quand ça vient d'un inconnu, on n'accepte pas !
Comment protéger son PC des virus
Windows 11 : Compatibilité, Configuration minimale requise, télécharger ISO et installer Windows 11

Comment demander de l'aide sur le forum
Evaluer le site malekal.com
Partagez malekal.com : n'hésitez pas à partager les articles qui vous plaisent sur la page Facebook du site.
Malekal_morte
Messages : 116326
Inscription : 10 sept. 2005 13:57

Re: Backdoor.Win32.IRCBot.byk/MyPhoto51.JPG_ScannedByMcafee.com

par Malekal_morte »

Se propage via des zips du type :
myPic012.zip
MyPhoto36.zip
MyPhoto17.zip

contenant les fichiers suivants :
MyPhoto43.JPEG-ScannedByMsn.com
myPic012.JPEG-www.fileshare.com
NewPhoto61.JPG_ScannedByMSN.com



Message de propagation :

en Français :
Tu n'as pas fait l'ampur avec eux, ou l'as tu fait?
Je pense que j'ai couche avec eux.
Putain, c'est chaud ca!
C'est chaud ca?
Tu vois ces gens fous?On baise presque sur la piste de danse!
Est ce horrible si je me rappelle seulement du sexe?
Tu ne penses pas que j'ai fait l'amour avec eux, pas vrai?
Je pense que j'ai fait l'amour avec eux. Qu'est ce que je dois faire.
Je pense que j'ai couche avec eux.
Ai-je pu coucher avec eux?
En anglais :
checkout my newest picture before I upload!!
hey over there... check out my new pic!
when youre around accept.. its my newest default picture!
u seen this crazy shit? I just don't believe it...
MY GOD this is hot as fuck!
I just edited this design for a friend. U think it's good?
I think I had sex with them :X What should i do?!
You don't think I had sex with them... rite?
Is it horrible if I only remember the sex?
Fucks sake this can't be your pic!
Would you have had a threesome with them?!
OMFG! I can't believe I had a threesome with them!
You see these crazy people? Havin sex on the dance floor!
you think this pic i took is good?
could I have had sex with them?!
new party pictures :) WOW it was fuckin insane!
You wanta see something insanely funny? accept this. OMG :)
Beer-More n Beer-dancing is a bad idea. Look what happaned!
want to see my new pics? Just take a look.
I just found this nasty pic.. its just wrong, but you need to see it!
Check out he new shirt I got ;)
This is my newest webcam.. is the pic quality on it alrite?
I think I just found an old picture of you... its cute ;)
you'll freakout when you see this picture
you might scream when you see this picture, then prob slap me!
plz dont kill me for sending you this pic, you must see it!
haha this picture of you is HILARIOUS! ;)
let me introduce you to my newest buddy :) accept already
Wow I got so fucked last night. Just look!
just found new myspace pics! here
You didn't have sex with them... or did u?!
I think I slept with them! atleast it was good!
Could I have slept with them?
this person looks like you. It's mad freaky.
watch out.. this picture im sending you is soooooooo nasty!!
do I look good with this new mix? or utterly horrible?
Someone just tagged me in this picture. Man am I drunk.
did I send you my new pic? if not here it is :)
How do we look together? I think the edit looks good!
this picture is so amazing I cannot believe it is real!!!
want meh to tag you in this picture on facebook?
Fucks sake this is really you?
can I add your picture to my newest album?
Does my new hair style look good? bad or fugly?
checkout the newest faster car.. it is incredible!
do I look good in this picture? or just ok...
Hi, remember this picture of you? I think u were wasted :X
You look soooo sexy in this picture!
do you like dogs? Just look at the one my parents got.
Damn this is some good pole dancing! *couldnt look away
can I post this picture of us to my new blog account?
This is so hot you'll want it badly, just look already!
Man this girl got sooo fucked out of her mind last night!
do you know this person on this picture? I think you do ;)
I think you will pass out when you see this pic
I was so drunk at this party.. I definately don't even remember this!
I can't believe I am in this picture look! OMG
My lord last night was crazy. Look at the pic I snapped!
haha you're gonna laugh hard when you see this
I took this pic on my vacation:) Looks beautiful.
this is so nasty... its just wrong.
I'm pretty sure I just slept with them :X What do i do?
your mom is in this picture lol
ou :
checkout my newest pic before I upload!!
hey over there... check out my new photo!
when youre around accept.. its my new default pic.
u seen this crazy shit?
holy shit this new pic is hot as fuck!
I just made this design for a friend. U like it?
I think I had sex with them :X What should i do?
You don't think I had sex with them... rite?
Is it horrible if I only remember the sex?
Is this really a pic of you?
Would you have had a threesome with them?
Wow! I can't believe I had a threesome with them!
You see these crazy people? Almost havin sex on the dance floor!
How hot is this?
Damn this is sexy!
u want to see something really funny? Take a look! I cant stop laughing!
do you like this picture I took?
could I have had sex with them?
new party pictures :) WOW it was insane!
You want to see something insanely funny? accept this. OMG :)
Do you like sexyness? accept this and you will find out ;)
Beer-More Beer-dancing is a bad idea. Look what happaned!
want to see my new pics? Take a look.
I just found this nasty pic.. its just wrong, but you need to see it!
Just look at the new shirt I got ;)
This is my newest webcam.. The pic quality on it alrite?
I think I just found an old picture of you...want it? here it is!
dont freakout when you see this picture
you might scream when you see this picture lol
plz dont kill me for sending you this picture, you've got to see it!
haha this picture of you is HILARIOUS!
let me introduce you to my newest friend :) accept already
Wow I got so fucked last night. Just look at the pic!
just found new myspace pics! here
crazy facebook pics accept ;]
You didn't have sex with them... or did u?
I think I slept with them!
Could I have slept with them?
this person looks like you. It's just freaky.
watch out.. this picture im sending you is sooooo nasty!!
do I look good with this new mix?
Hey! ya wanna see my new pic?
Someone just tagged me in this picture. Man am I wasted.
did I send you my new pic? if not here it is :)
How do we look together?
this picture is so amazing I cannot believe it!!!
want me to tag you in this picture on facebook?
Fucks sake this is really you?
can I add your picture to my new album?
Does my new hair style look good?
checkout the newest faster car.. it is incredible!
do I look good in this picture?
Hi, remember this picture of you? I think u were wasted :X
You look so sexy in this picture!
do you like dogs? Just look at the one my parents adopted.
Damn this is some good pole dancing!
can I post this picture of us to my new blog?
This is so hot I want it badly, just look already!
I got a new car!! look at the pics!
Man this girl got soo fucked last night!
do you know this person on this picture? I think you do ;)
I think you will faint when you see this pic
I was so drunk at this party.. check it out lol
I can't believe I am in this picture look!
My lord last night was crazy. Look at the pic I snapped!
haha you're gonna laugh hard when you see this
I took this pic on my vacation:)
this is so nasty...
I'm pretty sure I just slept with them :X What do i do?
I look so fat in this pic :(
your mom is in this picture lol
I like this picture of you a lot :)
En Allemand:
Konnte ich wirklich Sex mit ihnen gehabt haben.
Ist es schlecht, wenn ich mich nur an den Sex erinnere?
Ich denke ich hatte einen Dreier mit ihnen !
Verdammt bist Du das?
Ich denke ich habe mit ihnen geschlafen
Ich bin im Bett aufgewachtund erinner mich an nichts :x
Hey sie wurden letzte Nacht gefickt
Ich war so dicht ich erinner' mich noch nicht mal an das Photo
Wuerdest Du einen Dreier mit ihnen haben? Ich habe ;)
Les lignes ajoutées sur HijackThis selon la variante :
O4 - HKLM\..\Run: [Msn Serv] msnserv.exe
O4 - HKLM\..\Run: [Microsoft Services] msmpserv.exe
O4 - HKLM\..\Run: [Msn Boot] msnbootcfg.exe
O4 - HKLM\..\Run: [System Manager] sysmgr.exe
O4 - HKLM\..\Run: [Windows Hosts] winhosts.exe
O4 - HKLM\..\Run: [MSN User Services] msnuserv.exe
O4 - HKLM\..\Run: [Windows Spooler] winsplr.exe
Première règle élémentaire de sécurité : on réfléchit puis on clic et pas l'inverse - Les fichiers/programmes c'est comme les bonbons, quand ça vient d'un inconnu, on n'accepte pas !
Comment protéger son PC des virus
Windows 11 : Compatibilité, Configuration minimale requise, télécharger ISO et installer Windows 11

Comment demander de l'aide sur le forum
Evaluer le site malekal.com
Partagez malekal.com : n'hésitez pas à partager les articles qui vous plaisent sur la page Facebook du site.
Malekal_morte
Messages : 116326
Inscription : 10 sept. 2005 13:57

Re: Backdoor.Win32.IRCBot.byk/MyPhoto51.JPG_ScannedByMcafee.com

par Malekal_morte »

Scan des fichiers :
File winhosts.exe received on 03.29.2008 14:17:32 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 21/32 (65.63%)

Antivirus Version Last Update Result
AhnLab-V3 2008.3.29.0 2008.03.28 -
AntiVir 7.6.0.78 2008.03.28 TR/Crypt.XPACK.Gen
Authentium 4.93.8 2008.03.29 -
Avast 4.7.1098.0 2008.03.28 -
AVG 7.5.0.516 2008.03.28 SHeur.AZAL
BitDefender 7.2 2008.03.29 Backdoor.IRCBot.ABRC
CAT-QuickHeal 9.50 2008.03.28 Backdoor.IRCBot.cbz
ClamAV 0.92.1 2008.03.29 Trojan.IRCBot-1898
DrWeb 4.44.0.09170 2008.03.29 BackDoor.IRC.Tiny
eSafe 7.0.15.0 2008.03.18 Suspicious File
eTrust-Vet 31.3.5653 2008.03.29 -
Ewido 4.0 2008.03.28 -
F-Prot 4.4.2.54 2008.03.28 W32/Backdoor2.YAT
F-Secure 6.70.13260.0 2008.03.29 Backdoor.Win32.IRCBot.cbz
FileAdvisor 1 2008.03.29 -
Fortinet 3.14.0.0 2008.03.29 W32/IRCBot.CBZ!tr.bdr
Ikarus T3.1.1.20 2008.03.29 -
Kaspersky 7.0.0.125 2008.03.29 Backdoor.Win32.IRCBot.cbz
McAfee 5262 2008.03.28 W32/Sdbot.worm
Microsoft 1.3301 2008.03.28 Worm:Win32/Slenfbot.MG
NOD32v2 2983 2008.03.29 Win32/IRCBot.AAH
Norman 5.80.02 2008.03.28 W32/Ircbot.AAZT
Panda 9.0.0.4 2008.03.29 Suspicious file
Prevx1 V2 2008.03.29 SHeur.AZAL
Rising 20.37.51.00 2008.03.29 -
Sophos 4.28.0 2008.03.29 Mal/Emogen-N
Sunbelt 3.0.978.0 2008.03.18 Backdoor.IRCBot
Symantec 10 2008.03.29 -
TheHacker 6.2.92.258 2008.03.29 -
VBA32 3.12.6.3 2008.03.25 Win32.IRCBot.AAH
VirusBuster 4.3.26:9 2008.03.28 -
Webwasher-Gateway 6.6.2 2008.03.29 Trojan.Crypt.XPACK.Gen
Additional information
File size: 76800 bytes
MD5: b5412b66b36b3dc8d78c609cbd99cf57
SHA1: 0e39cd28eef0537219ab07137e25bd573d462a0e
PEiD: -

File winsplr.exe received on 03.29.2008 14:17:43 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 18/32 (56.25%)

Antivirus Version Last Update Result
AhnLab-V3 2008.3.29.0 2008.03.28 -
AntiVir 7.6.0.78 2008.03.28 TR/Crypt.XPACK.Gen
Authentium 4.93.8 2008.03.29 -
Avast 4.7.1098.0 2008.03.28 -
AVG 7.5.0.516 2008.03.28 SHeur.AZBE
BitDefender 7.2 2008.03.29 Backdoor.IRCBot.ABRC
CAT-QuickHeal 9.50 2008.03.28 -
ClamAV 0.92.1 2008.03.29 Trojan.IRCBot-1880
DrWeb 4.44.0.09170 2008.03.29 BackDoor.IRC.Tiny
eSafe 7.0.15.0 2008.03.18 Suspicious File
eTrust-Vet 31.3.5653 2008.03.29 -
Ewido 4.0 2008.03.28 -
F-Prot 4.4.2.54 2008.03.28 -
F-Secure 6.70.13260.0 2008.03.29 Backdoor.Win32.IRCBot.cbr
FileAdvisor 1 2008.03.29 -
Fortinet 3.14.0.0 2008.03.29 W32/SHEUR.ANX!tr
Ikarus T3.1.1.20 2008.03.29 Backdoor.IRCBot.ABRC
Kaspersky 7.0.0.125 2008.03.29 Backdoor.Win32.IRCBot.cbr
McAfee 5262 2008.03.28 -
Microsoft 1.3301 2008.03.28 Trojan:Win32/Ircbrute
NOD32v2 2983 2008.03.29 Win32/IRCBot.AAH
Norman 5.80.02 2008.03.28 W32/Ircbot.AAZX
Panda 9.0.0.4 2008.03.29 Suspicious file
Prevx1 V2 2008.03.29 -
Rising 20.37.51.00 2008.03.29 -
Sophos 4.28.0 2008.03.29 Mal/Emogen-N
Sunbelt 3.0.978.0 2008.03.18 -
Symantec 10 2008.03.29 -
TheHacker 6.2.92.258 2008.03.29 Backdoor/IRCBot.cbr
VBA32 3.12.6.3 2008.03.25 Win32.IRCBot.AAH
VirusBuster 4.3.26:9 2008.03.28 -
Webwasher-Gateway 6.6.2 2008.03.29 Trojan.Crypt.XPACK.Gen
Additional information
File size: 80384 bytes
MD5: b2548ba2413536263d5b066e3e3dc720
SHA1: 4a33a0b0a950ef7d90600f74c1305feb57c1a15b
PEiD: -
Première règle élémentaire de sécurité : on réfléchit puis on clic et pas l'inverse - Les fichiers/programmes c'est comme les bonbons, quand ça vient d'un inconnu, on n'accepte pas !
Comment protéger son PC des virus
Windows 11 : Compatibilité, Configuration minimale requise, télécharger ISO et installer Windows 11

Comment demander de l'aide sur le forum
Evaluer le site malekal.com
Partagez malekal.com : n'hésitez pas à partager les articles qui vous plaisent sur la page Facebook du site.
  • Sujets similaires
    Réponses
    Vues
    Dernier message

Revenir à « Vers/Virus MSN et arnaques sur MSN »