Search:  

 
theme to black backgroundlet page decide theme
HomeFind ServiceReviewsISP NewsFAQsForumsToolsDatabaseAbout 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » New malware found
Search Topic:
Uniqs:
731		 Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal
New CounterSpyV.2 memory use »
« KAV and VB100  
AuthorAll Replies

BB1984

join:2006-05-31
Australia

2 edits		New malware found

Firstly, sorry if this is the wrong forum for this post!

But I just yesterday came across an embedded SWF ActiveX file in a site that appeared malicious, so I sent it off to several AV vendors and Kaspersky have already gotten back with info - it is called Trojan-Clicker.SWF.Agent.b.

However like most AV sites they currently have no further write-up.

What I have tested on a imaged/test PC - when it runs it displays a flash window which has the text "Attacking..." (repeats), and it wants to repeatedly access the internet. However I'm not a coder so I can't get any further with it.

And once-again sorry if this is in the wrong forum.
to forum · permalink · · 2007-08-21 22:00:31 · Reply to this


Owlbet
Ignite the Ice
Premium,MVM
join:2002-09-24
Palmer, AK
clubs:		Re: New malware found - anyone game to test it?

Why not upload it here »Malware archive and let all the security vendors have a look-see at it and make definitions for it. That benefits everyone.
to forum · permalink · · 2007-08-21 22:56:30 · Reply to this

BB1984

join:2006-05-31
Australia		reply to BB1984
Thankyou Owlbet - I have done so. Cheers.
to forum · permalink · · 2007-08-22 01:06:11 · Reply to this

BB1984

join:2006-05-31
Australia

reply to BB1984
More AV vendors are coming back positive:

Kaspersky
Ikarus
Avira
F-Secure
Fortinet

AVG said is was harmless tho. I have sent the sample back to them with other AV vendors' findings as motivation..

But no description of what it does.. anyone keen on looking at it can find it in the malware forum linked above.
to forum · permalink · · 2007-08-24 04:18:53 · Reply to this

BB1984

join:2006-05-31
Australia

reply to BB1984
Re: New malware found

said by Gavin_TH :

Its compressed. Uncompress it and you see URLs to an "underground hacking" forum

This "hits" the site every frame, either to mount up a high number of clicks, or to annoy the site admin
Thanks for that. Good to know.
to forum · permalink · · 2007-09-04 01:33:23 · Reply to this
Forums » Up and Running » Security » SecurityNew CounterSpyV.2 memory use »
« KAV and VB100  

Tuesday, 01-Dec 14:39:15 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [68] Comcast Releasing Promised Usage Meter
· [62] Baltimore To Ban Lazy Cable Installs
· [54] Broadband Killed The Game Console
· [41] Rogers Unveils The ISP Dream Model
· [38] Rural Carriers Quickly Embracing Fiber
· [33] AT&T Top Lobbyist Cicconi Has His Feelings Hurt
· [32] Charter Exits Chapter 11
· [24] Midcontinent Socked With Easement Lawsuit
· [20] Vivendi Agrees, Comcast/NBC Deal Soon
· [18] ACTA: Global Three Strikes
Most people now reading
· Heating - my dad gave me this advice... [Home Repair & Improvement]
· Windows 7 boot manager editing questions [Microsoft Help]
· [Rant] called out sick! [Rants, Raves, and Praise]
· buying a one way ticket [General Questions]
· [Phish] email from CDC "personal vaccination profile" [Spam, Scam and Phishbusters]
· IMG 1.7 (IMG Updates and Discussion) [Verizon FIOS TV]
· [ Classes] ATTN Death Knights - Post your spec for critique! [World of Warcraft]
· Fun screwing with PuG raids. [World of Warcraft]
· Outbound port 25 filtering. [TekSavvy]
· Is Microsoft Technet ok to use for my family PC's? [Microsoft Help]