• Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

jamesbond.exe

VirusTotal 17.1 %

[Register or log in to view the URL]



[Register or log in to view the URL]

password: infected

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

webcam.exe
Downloaded from hxxp://www.softcab.com/ftp/webcam.exe

VirusTotal  12.2 %

[Register or log in to view the URL]


[Register or log in to view the URL]
password: infected

Last edited by Kobayashi (2011-06-17 17:45:57)

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

VirusTotal  23.8 %

[Register or log in to view the URL]


[Register or log in to view the URL]
password: infected

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

chu.exe

VirusTotal 21.4 %

[Register or log in to view the URL]


Download:
[Register or log in to view the URL]
password: infected

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

From Yahoo Mail  "IRS notification letter"


http://i1104.photobucket.com/albums/h336/Kobayashi1947/ScreenHunter_01Jun190054.gif

VirusTotal 31 %
[Register or log in to view the URL]

Download:
[Register or log in to view the URL]


Another sample
[Register or log in to view the URL]
VT 57.1 %
[Register or log in to view the URL]

Password: infected

See also here:
[Register or log in to view the URL]

Last edited by Kobayashi (2011-07-03 08:19:03)

Post's attachments

IRS.rar 12.15 kb, 3 downloads since 2011-07-03 

You don't have the permissions to download the attachments of this post.

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

Received by mail.

http://i1104.photobucket.com/albums/h336/Kobayashi1947/PostExpressService.gif



VirusTotal 12.2 %
[Register or log in to view the URL]

Download.
[Register or log in to view the URL]
password: infected

  • Registered: 2010-03-02
  • Posts: 6
  • User Karma: 0

Re: Got a Virus site ? Post it here

[Register or log in to view the URL]

it's a trojan ransom
unlock code:1351236

send thanks or karma to minodal95 (and herm1t)

first screen
http://imbx.us/SvK.bmp

second screen
http://imbx.us/SqnV.bmp

it has different languages too

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

From Yahoo mail.
Subject:  "ACOMPANHANTES DE LUXO"
or            " 4 Jovens sao filmados e presos apos fazer sexo com menor em posto de gasolina no Distrito Federal"

Download link in mail:
hxxp://ad.doubleclick.net/clk;210557104;32229481;v?http://187.61.5.26/~flogsnet/d/FOTOS_DSC_JPG.php?0.40971

Downloaded file: Fotos_dsc_0932_jpg.cpl
VirusTotal 47.6 %
[Register or log in to view the URL]

Created files:
c:\WINDOWS\kernelSms32.exe
VirusTotal 31 %
[Register or log in to view the URL]

c:\WINDOWS\svchosts32.exe
VirusTotal 38.1 %
[Register or log in to view the URL]

Startup :
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

Does connect to 201.7.184.2, located in Brazil

Download all files with test rapport.
[Register or log in to view the URL]
password: infected

+1

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

Received by mail.
http://i1104.photobucket.com/albums/h336/Kobayashi1947/Urgente-june24-2011.gif
Downloaded from hxxp://demo.ckentgroup.com/kenchan/international/fotos_jpg.exe
VirusTotal 31.0 %
[Register or log in to view the URL]

Dropped /downloaded files:
c:\Documents and Settings\All Users\Application Data\Designer\DesignerLG.exe
Registry key added: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
VirusTotal 35.7 %
[Register or log in to view the URL]

c:\Documents and Settings\%userr%\Local Settings\Temp\hookdll.dll
VirusTotal 7.1 %
[Register or log in to view the URL]

Download 3 files
[Register or log in to view the URL]
password: infected

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

Downloaded from hxxp://jessicapussy.fileave.com/Steam.exe

http://i1104.photobucket.com/albums/h336/Kobayashi1947/snap.gif

Steam.exe
VirusTotal 36.7 %
[Register or log in to view the URL]

Steam.exe does install process32.exe and tempfile.exe (a copy of Steam.exe)
A startup key is added to the registry for tempfile.exe
(HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run)

process32.exe
VirusTotal 21.4 %
[Register or log in to view the URL]

Download.
[Register or log in to view the URL]
password: infected

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

From mail "It's Kathy's new car!"
Link to hxxp://arcid_87326160.oposumcruiser.com/arc/file
http://i1104.photobucket.com/albums/h336/Kobayashi1947/snap-1.gif

Download archive.exe
VirusTotal 61.9 %
[Register or log in to view the URL]

New created file "ytra.exe"
with Registry Key "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run"
VirusTotal 45.2 %
[Register or log in to view the URL]

Download
[Register or log in to view the URL]
password "infected"

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

To view porn files on your phone, you must download and install the YouTube-Player v.1.65

From website hxxp://youtubemobile.ru/ downloaded hxxp://zver.in/dx/123/Porno_Player.jar

VirusTotal 4.8 %
[Register or log in to view the URL]

Download
[Register or log in to view the URL]

password "infected"

+1

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

Received by Yahoo mail.
Similar to this one. http://forum.vxheavens.com/viewtopic.php?pid=6897#p6897
http://i1104.photobucket.com/albums/h336/Kobayashi1947/ScreenHunter_01Jun290902.gif

Imagen-Jpg .exe
VirusTotal
[Register or log in to view the URL]


New created files:
DesignerLG.exe
VirusTotal
[Register or log in to view the URL]

hookdll.dll
VirusTotal
[Register or log in to view the URL]

Startup key is added for "DesignerLG.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "DesignerLG.exe"

Download
[Register or log in to view the URL]
password "infected"

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

Crack.Free_Disk_Defrag

Keygen.Free_Disk_Defrag_2.0.3.45446.exe
VirusTotal  19.5%
[Register or log in to view the URL]

Crack.Free_Disk_Defrag_2.0.15.45446.exe
VirusTotal  26.2%
[Register or log in to view the URL]

Download
[Register or log in to view the URL]
password "infected"

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

Downloaded from hxxp://www.projectxcam.com/
Template-Extract.exe

VirusTotal  59.5 %
[Register or log in to view the URL]

Download
[Register or log in to view the URL]
password: "infected"


x7_Race_Changer.exe
VirusTotal 64.3 %
[Register or log in to view the URL]

Download
[Register or log in to view the URL]
password "infected"


test.bat
VirusTotal 19.0 %
[Register or log in to view the URL]

Download
[Register or log in to view the URL]
password "infected"

Last edited by Kobayashi (2011-06-29 21:49:36)

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

bitcoin stealing trojan

Read [Register or log in to view the URL]

http://i1104.photobucket.com/albums/h336/Kobayashi1947/lunapic_130941727454756_5.gif


builder.exe  0%
[Register or log in to view the URL]

stub.exe  4.8 %
[Register or log in to view the URL]

BC-Done.exe   4.8 %
[Register or log in to view the URL]

bitcoin.php   0 %
[Register or log in to view the URL]

bitcoin2  2.4 %
[Register or log in to view the URL]


Download
[Register or log in to view the URL]
password "infected"

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

svchosta.exe
Downloaded from hxxp://91.212.135.158/svchosta.exe

VirusTotal 42.9 %
[Register or log in to view the URL]


Download
[Register or log in to view the URL]
password "infected"

Post's attachments

svchosta.rar 111.57 kb, 9 downloads since 2011-06-30 

You don't have the permissions to download the attachments of this post.

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

bodun.jar

hxxp://dalanaya.cz.cc/bodun.jar

VirusTotal 45.2 %
[Register or log in to view the URL]


Download
[Register or log in to view the URL]
password "infected"

Post's attachments

bodun.rar 17.7 kb, 7 downloads since 2011-07-01 

You don't have the permissions to download the attachments of this post.

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

update.exe
downloaded from hxxp://46.108.225.43/update.exe

VT 31.0 %
[Register or log in to view the URL]

Creates file jashla.exe with Registry autostart.
VT 33.3 %
[Register or log in to view the URL]

Download
[Register or log in to view the URL]
password "infected"

Post's attachments

update.rar 222.71 kb, 11 downloads since 2011-07-01 

You don't have the permissions to download the attachments of this post.

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

Atualizacao_CitiBank.exe

Downloaded from hxxp://186.202.61.217/Atualizacao_CitiBank.exe

http://i1104.photobucket.com/albums/h336/Kobayashi1947/citybank.gif

VirusTotal  11.9 %
[Register or log in to view the URL]

Download
[Register or log in to view the URL]
password "infected"

Post's attachments

citybank.rar 537.11 kb, 10 downloads since 2011-07-02 

You don't have the permissions to download the attachments of this post.

  • Registered: 2011-05-26
  • Posts: 3
  • User Karma: -2

Re: Got a Virus site ? Post it here

thank you

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

GOOGLE.exe

Download hxxp://109.235.249.44/GOOGLE.exe
VT 82.9 %
[Register or log in to view the URL]

Created files;
Hit.exe
VT 83.3 %
[Register or log in to view the URL]

resim.exe
VT 81.0 %
[Register or log in to view the URL]

tv.exe
VT 83.3 %
[Register or log in to view the URL]


web.exe
VT 83.3 %
[Register or log in to view the URL]


winlogon.exe
VT 73.8 %
[Register or log in to view the URL]

syz.reg
VT 0.0 %
[Register or log in to view the URL]

Download
[Register or log in to view the URL]
password "infected"

Post's attachments

GOOGLE.rar 1.2 mb, 12 downloads since 2011-07-03 

You don't have the permissions to download the attachments of this post.

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

Stephanie's Nude Videos Exposed 2011.exe

VT  11.9 %
[Register or log in to view the URL]

Download
[Register or log in to view the URL]
password "infected"

Post's attachments

Stephanie's Nude Videos Exposed 2011.rar 19.68 kb, 8 downloads since 2011-07-03 

You don't have the permissions to download the attachments of this post.

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

visualizarDOC-PDF.scr
Download hxxp://www.alugarveleiro.com.br/XHTML//visualizarDOC-PDF.scr
VirusTotal 42.9 %
[Register or log in to view the URL]

Creates file C:\Windows\service\2s.exe
with autostart HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\RUN

Download
[Register or log in to view the URL]
password "infected"

Post's attachments

visualizarDOC.rar 17.76 kb, 7 downloads since 2011-07-04 

You don't have the permissions to download the attachments of this post.

  • Registered: 2011-01-17
  • Posts: 250
  • User Karma: 45

Re: Got a Virus site ? Post it here

smiley9.gif.exe
hxxp://poderygloria.org/.smileys/smiley9.gif.exe

VirusTotal 44.2 %
[Register or log in to view the URL]

Download
[Register or log in to view the URL]
password "infected"

Post's attachments

smiley.rar 120.69 kb, 12 downloads since 2011-07-04 

You don't have the permissions to download the attachments of this post.