KernelMode.info

ProtectInfo

Hi,
ProtectInfo FakeAv. :D

Web link - hxxp://update.protectinfo.kr/setup/install_p1.exe
File size - 863 KB.




Regards,

rough_spear.

Fake AV(Sysdef). also dropps one {random_name}.tmp file, this tmp file is detected as "Trojan:Win32/Alureon.FL" by Microsoft. :D
Possibly TDL4/TDSS rootkit along.

hxxp://www.dinsuceava.ro/icon/1/index.php?spl=mdac
File size - 495 KB.

VT Link - http://www.virustotal.com/file-scan/rep ... 1317403835

MD5 : fc13eb19b37b0d59cd499a47b284568e
SHA1 : f3ed45315c618a7771912b89a5534050e3f1e40a
SHA256: 5d3eb503275c3d7cd0efb7f46a60b2d97751dded571eb7d112b0bf9b30bcf0b3
ssdeep: 12288:sRYyCXwAoqZ0mOS+cVDr7JFg2HmzwyBKNZCAEshzs9+waVuI:sRYyCXvo6LOQDfg2G1+CAEE

Dropped file name - B962.tmp
File size - 300 KB.

VT Link - http://www.virustotal.com/file-scan/rep ... 1317406553

MD5 : 4412b8fa733828d17a843235c02bf599
SHA1 : c960f843e79f7b5aff4e28f570fe8e49fde1e3af
SHA256: 2c8ed65d8fb1952faed783cfda57c9b72e476ff7b19dff99842f004fad585a26
ssdeep: 6144:zRcdlw6sjTLZyyvCpZoN6jRt5SImCTA4g1pkaBuhOa:z6dlJMLIFmEj7tTAxjBuwa


Regards,


rough_spear. :lol:

More fresh and refined Security Spheres :)

VT detect 2 /43 (4.7%)
http://www.virustotal.com/file-scan/rep ... 1317436657

59 files, multipart archive

pass: malware

AV Guard Online

bitx wrote:AV Guard Online

Serial for activation: 9992665263

what a sh*t lol..

Zentom System Guard

Hi,

Dropper File - dllupdt70.exe
File size - 2.32 MB
VT Link - http://www.virustotal.com/file-scan/rep ... 1318137290

Dropped File - finc70dkk.exe
File Size - 2.00 MB
VT Link - http://www.virustotal.com/file-scan/rep ... 1318102556



Regards,

rough_spear. :D

rough_spear wrote:Hi,

ZENTOM SYSTEM GUARD

Dropper File - dllupdt70.exe
File size - 2.32 MB
VT Link - http://www.virustotal.com/file-scan/rep ... 1318137290

Dropped File - finc70dkk.exe
File Size - 2.00 MB
VT Link - http://www.virustotal.com/file-scan/rep ... 1318102556

Serial for activation: MTk4-NzE1-NTYx-NTUw

Cloud Protection

Target: Hardcore_Porn_Movie_82.mpeg.exe
MD5: 9ca34506acf87aa24c3bbd1ea2218609
VT: http://www.virustotal.com/file-scan/rep ... 1318538333

Serial: 1835437232

Hi All, :D

Again System Restore

File name - keito.exe
VT link - http://www.virustotal.com/file-scan/rep ... 1318613128

MD5 : fd58ad7cc72e9286a618f127fa241946
SHA1 : ed076b20442a1902d5aef9b3d9a92366a8001227
SHA256: 46c6d88a45847cfe6c228d3f424e5bd9fafcd86cf22bb57026abfbe0c6d607bb

Regards,


rough_spear. ;)

Security Defender



(Sample found yesterday) Security Defender.dll 1/43: >> 2.3%
https://www.virustotal.com/file-scan/re ... 1319709080

(Sample found today) Security Defender2.dll: 0/43 >> 0.0%
https://www.virustotal.com/file-scan/re ... 1319710208