CastleCops® screensaver.exaserve.net and screensaver.filesurv.com

Need help? Click here to register for free! Absolutely zero advertisements on this site!

	Donation/Premium

	Donations. Become Premium Today!

	Security Central

	· Home · PIRT/Fried Phish · MIRT · SIRT · Deutsch · Wiki · Newsletter · O16/ActiveX · CLSID List · Contest2007 · Downloads · Feedback (send) · Forums · HijackThis · Hijacktrend · LSPs · My Downloads · O18 · O20 · O21 · O22 · O23 · O9 · Premium · Private Messages · Proxomitron · Reviews · Search · StartupList · Stories Archive · Submit News · WsIRT · Your Account · Acceptable Use Policy

Forum FAQ

Usergroups

Profile

Select FavForums

screensaver.exaserve.net and screensaver.filesurv.com

All -> FavForums -> Web Malware Links

[del.icio.us!] [digg it!] [reddit!]

View previous topic :: View next topic

Author

Message

xJSTx

Captain
Captain

Joined: Apr 02, 2007
Posts: 691
Location: UK

Posted: Sun Apr 08, 2007 4:21 am Post subject: screensaver.exaserve.net and screensaver.filesurv.com

Code:

http://screensaver.exaserve.net/SexyVideoScreenSaver.exe

VirusTotal (detected by 12 out of 31)
AhnLab-V3 2007.4.7.0 04.06.2007 no virus found
AntiVir 7.3.1.48 04.07.2007 DR/Dldr.PurityScan.DX
Authentium 4.93.8 04.06.2007 is a security risk or a "backdoor" program
Avast 4.7.936.0 04.06.2007 no virus found
AVG 7.5.0.447 04.08.2007 no virus found
BitDefender 7.2 04.08.2007 no virus found
CAT-QuickHeal 9.00 04.06.2007 no virus found
ClamAV devel-20070312 04.08.2007 no virus found
DrWeb 4.33 04.07.2007 Trojan.Virtumod
eSafe 7.0.15.0 04.07.2007 Win32.PurityScan.dx
eTrust-Vet 30.7.3549 04.06.2007 no virus found
Ewido 4.0 04.07.2007 no virus found
FileAdvisor 1 04.08.2007 no virus found
Fortinet 2.85.0.0 04.08.2007 W32/PurityScan.DX!tr.dldr
F-Prot 4.3.1.45 04.04.2007 W32/Downloader
F-Secure 6.70.13030.0 04.07.2007 Trojan-Downloader.Win32.PurityScan.dx
Ikarus T3.1.1.3 04.07.2007 Trojan-Dropper.Win32.Agent.bee
Kaspersky 4.0.2.24 04.08.2007 Trojan-Dropper.Win32.Agent.bee
McAfee 5003 04.06.2007 no virus found
Microsoft 1.2405 04.07.2007 no virus found
NOD32v2 2173 04.07.2007 no virus found
Norman 5.80.02 04.05.2007 no virus found
Panda 9.0.0.4 04.07.2007 no virus found
Prevx1 V2 04.08.2007 no virus found
Sophos 4.16.0 04.06.2007 no virus found
Sunbelt 2.2.907.0 04.07.2007 ClickSpring.PuritySCAN
Symantec 10 04.08.2007 no virus found
TheHacker 6.1.6.085 04.04.2007 no virus found
VBA32 3.11.3 04.07.2007 Trojan-Downloader.Win32.PurityScan.dx
VirusBuster 4.3.7:9 04.07.2007 no virus found
Webwasher-Gateway 6.0.1 04.08.2007 Trojan.Dldr.PurityScan.DX

Aditional Information
File size: 2817392 bytes
MD5: 7dc2737826acf36fa646e3656f511fbb
SHA1: bc9b5fbb318854554cd885d549067a8cd3883af0
packers: BINARYRES, SETUP FACTORY, UPX
Sunbelt info: PurityScan is an ad supported program that scans the user's Internet Explorer files, including browser cache, cookies and history for pornographic/adult related words and allows the user to delete them.

Code:

http://screensaver.filesurv.com/actiongirls.exe

	All -> FavForums -> Web Malware Links	All times are GMT
Page 1 of 1

You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You cannot download files in this forum


	2002-2008 � Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 129ppm 0.294s (0.059s) Making cybercriminals unhappy since 2002*