CastleCops® Benazir Bhutto malware javascript link

Need help? Click here to register for free! Absolutely zero advertisements on this site!

	Donation/Premium

	Donations. Become Premium Today!

	Security Central

	· Home · PIRT/Fried Phish · MIRT · SIRT · Deutsch · Wiki · Newsletter · O16/ActiveX · CLSID List · Contest2007 · Downloads · Feedback (send) · Forums · HijackThis · Hijacktrend · LSPs · My Downloads · O18 · O20 · O21 · O22 · O23 · O9 · Premium · Private Messages · Proxomitron · Reviews · Search · StartupList · Stories Archive · Submit News · WsIRT · Your Account · Acceptable Use Policy

Forum FAQ

Usergroups

Profile

Select FavForums

Benazir Bhutto malware javascript link

All -> FavForums -> Web Malware Links

[del.icio.us!] [digg it!] [reddit!]

View previous topic :: View next topic

Author

Message

IP: 125.24.*.*

Guest

Posted: Fri Dec 28, 2007 12:52 pm Post subject: Benazir Bhutto malware javascript link

xxx://b15.3322.org/hxw/qq.exe Is malware exe file from site news or blog about Benazir Bhutto assasination. The javascript is present over many news pages and blogger sites related at Benazir Bhutto news More about script here http://edetools.blogspot.com/2007/12/attackers-exploiting-news-of-benazir_28.html and about pages with script here http://edetools.blogspot.com/2007/12/attackers-exploiting-news-of-benazir.html Edgar from Bangkok

fatdcuk

MIRT Hunter
Premium Member

Joined: Oct 31, 2006
Posts: 2986
Location: Uk

Posted: Fri Dec 28, 2007 1:56 pm Post subject:

Thanks Edgar It is now up on ML>>> /p1038297-MD5_b70c0911f849a139df48ac197af71aba_qq_exe.html#1038297 Here's what the trojan downloader does>>> http://threatexpert.com/report.aspx?uid=c24eb5cf-4557-4556-be0f-7643c4a5b048 _________________ Malware hunter....Got Bot ? http://www.castlecops.com/f269-Malware_Listserv.html

Cretem0nster

MIRT Hunter

Joined: Jul 02, 2005
Posts: 121
Location: USA

Posted: Fri Dec 28, 2007 3:51 pm Post subject:

Here are the 4 scripts scan results,not really sure where to put the zip. http://www.virustotal.com/resultado.html?b684d88f47489ca84ce65022b4d26789 http://www.virustotal.com/resultado.html?46e69bca36a904955bdbe9c35232b1b5 http://www.virustotal.com/resultado.html?076e32f87fb52b1092e09eade8a045f9 http://www.virustotal.com/resultado.html?234fb8f449c483f75b62e1e89189653d

tetak

MIRT Team Lead
Premium Member

Joined: Jan 19, 2007
Posts: 5864

Posted: Fri Dec 28, 2007 4:23 pm Post subject:

If you still have the 4 scripts you could attach the .zip file to this post. _________________ Got Windows XP? Help protect your PC from malware with Microsofts anti-spyware program Windows Defender. Download it for free from http://www.microsoft.com/athome/security/spyware/software/default.mspx

	All -> FavForums -> Web Malware Links	All times are GMT
Page 1 of 1

You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You cannot download files in this forum


	2002-2008 � Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 157ppm 0.388s (0.068s) Making cybercriminals unhappy since 2002*