Re: what is this? new malware?

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
On Feb 23, 1:29 am, "kreepz" <(remove" _-" to
reply)kreepz86_-...@gmail.com> wrote:
Quoted text here. Click to load it
===========
It was just a link to the executable, correct?   Not the actual .exe
file as the attachment?

Definitely different malware then I had received.   I know you had it
scanned by K, did you also submit the file directly to them(although
VT should do that??)

Re: what is this? new malware?

I saw the (file) link you posted on a blog - seems K now has it
properly ID'ed:
Kaspersky    7.0.0.125    2008.02.24    Trojan.BAT.Qhost.u




Re: what is this? new malware?

yeah!  finally!!!  it got both the script and the executable file nailed
down now.

detected: Trojan program Trojan-Downloader.JS.Agent.biu File: D:\My
Documents\My Downloads\Suspects\Nicole256\nicoleSuspiciousCode.TXT <--
detected: Trojan program Trojan.BAT.Qhost.u File: D:\My Documents\My
Downloads\Suspects\Nicole256\Nicole256.jpg.exe <---

gonna run it by virus total to see if any other av programs detects it as
well.



Quoted text here. Click to load it



Re: what is this? new malware?

Quoted text here. Click to load it

that's the funny thing.  the link was to
"http://xxx.241.xxx.30/pics/nicole256.php " (omitted some numbers from link).
this of course would turn into a live executable file if clicked on.

here is a screenshot to see what i am talking about.
http://img141.imageshack.us/img141/3420/nicoleey4.jpg

Quoted text here. Click to load it

yes i have and yet to recive any type of feedback friom kav.  i wonder why.



Site Timeline