1 reply to this topic

[rroot]

Within a web browser I typed in a incorrect web address and got a notice from my anti-virus program.
Sent the offending file to Jotti, VirusScan and VirusTotal.
All 3 report malware.
Attached file contains the HTM file created within my temp file location and a text file with the website.
Results from Jotti:
MD5: f2fca28bd40d6819dde4be0f385f55a8
SHA1: a8fd5775ad11f4f0ccb9234785f373d23b21ff8e
http://virusscan.jot...4b0752794baa211
- - -
Results from VirusScan.Org:
File Name : nwps_com[1].htm
File Size : 1771 byte
File Type : HTML document text
MD5 : f2fca28bd40d6819dde4be0f385f55a8
Scanner results : 22% Scanner(s) (8/37) found malware!
http://r.virscan.org...81b5c61f9b.html
- - -
Results from VirusTotal.com:
MD5: f2fca28bd40d6819dde4be0f385f55a8
https://www.virustot...sis/1357754355/
File name: nwps_com[1].htm
File type: HTML
Tags: html
Detection ratio: 9 / 46
- - -
Some of the results are:
HTML.Agent!IK
JS:Includer-L [Trj]
TrojWare.JS.Redirector.b
HTML.Agent
Trojan.JS.Redirector.xa
Trojan:JS/IframeRef
HTML.Redirector.WD
Trojan.HTML.Framer.do (v)
Trojan.HTML.Agent.II

[sUBs]

Did you forget to attach the file?