CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Some italian sites with obfuscate script
Goto page Previous  1, 2
 
Post new topic   Reply to topic       All -> FavForums -> Web Malware Links [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
darkuser

Cadet
Cadet


Joined: Apr 30, 2008
Posts: 9
Location: USA

PostPosted: Thu May 01, 2008 3:17 pm    Post subject:
Reply with quote

this is a nasty and new pwn
if you are not adobe patched to 8.1.2
it will load in the browser run then reboot the box.

and pwned

the payload is trojan.mebroot
or some new varient therof
but using adobe to deliver it is new

It appears to target this exploit http://www.securityfocus.com/bid/25748


it s not detected by anything
i manually quarintined in symantec
and lists it as infected and risk glp
accidentally and old symantec 8 client
identifyed it as trojan.mebroot

i ran it throught virus total ... nothing

http://www2.gmer.net/mbr/

but mbr.exe
will detect it on a sandbox
i whacked intentionally

Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Web Malware Links All times are GMT
Goto page Previous  1, 2
Page 2 of 2

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You cannot download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer