KernelMode.info

Xylitol wrote:http://xylibox.blogspot.com/2011/06/tra ... akeav.html
Tracking Cyber Crime: Inside the FakeAV Business (MS Removal Tool related)

I like this comment (fyi to anonymous - to give something you need to have this one first).

Windows Stability Alarm

Windows Security

Here is new windows security. :)

hxxp://difiestran.cz.cc/AdwareRemover.exe

Regards,


rough_spear.

bitx wrote:Windows Stability Alarm

what the point in packing malwre by asprotect? :lol:
when static unpacker available http://exelab.ru/f/index.php?action=vth ... opic=18361

EP_X0FF wrote:

i lol'd too, today some guys on irc talked me 'i will pay money you will be killed'
haha who they will call, hitman ? :)

in attach, unpacked MS removal tool sample, have fun.








20/41 >> 48.8%
http://www.virustotal.com/file-scan/rep ... 1308411365

Tracking Cyber Crime: Gagarincash AV Affiliate: http://xylibox.blogspot.com/2011/06/tra ... sh-av.html
Security Shield 2011 related.



In attach, unpacked sample, have fun.

8/42 >> 19.0%
http://www.virustotal.com/file-scan/rep ... 1308513477

Security Shield fake scanner page & decoder

hXXp://46.161.10.145/index.php?6CN=OAY7O72C8RW2738&Ou58Q=KClLP2hbJ0QiOG1eV0QuKR1Y&F8=934&h9eiY=SAkW1xLK2IBF3oAHmAPbAJMci5zRQIHLV5QS11OcHF9Bl&9q=4794QTM697WU39K20X8B50CRB&LjhsK=Q61992FID692T998864232&llOA=ixTC3IINmVXVgFceX8%2BAGIIAn9sa3djczpdR0M%3D&jFo9m=xQZl1aDQoGV1NXAHhtU&8429L=ONB1Q85FUZERDN8&Q93bV=N&SpI=URGKTMuGj8rK&fm2=l1IXFxNL\#9



Use js/decoder.js in malzilla for deobs the rsa.

Windows Clear Problems

Loc: hxxp://hdxxxvideoonline.com/movie8064/movie.exe



http://www.virustotal.com/file-scan/rep ... 1308685311

Windows Cleaning Tool

Department of Justice Disrupts International Cyber Crime Rings Distributing Scareware: http://www.fbi.gov/news/pressrel/press- ... -scareware