looks like the payload eventually comes from hxxp://anti-malware-pro-scanner.com going via
hxxp://getluckywebpagepromo.cn/soft.php?aid=083909&d=100&refer=97315cb3b
#1
Posted 04 February 2009 - 10:51 PM
#2
Posted 06 February 2009 - 04:35 AM
MBAM detects this
"Don't worry about a thing,
'Cause every little thing gonna be all right!"
'Cause every little thing gonna be all right!"
#3
Posted 06 February 2009 - 06:12 AM
Installer and install not getting hit by MBAM here?
Installs Antivirus 360.
hxxp://www.freeantiviruswebscan.com/
Virus Total
File size: 172032 bytes
Installs Antivirus 360.
hxxp://www.freeantiviruswebscan.com/
Quote
File InstallAVg_77083909.exe received on 02.06.2009 07:02:21 (CET)
Current status: finished
Result: 9/39 (23.08%)
Current status: finished
Result: 9/39 (23.08%)
File size: 172032 bytes
#4
Posted 06 February 2009 - 09:59 AM
Something must have been seriously changed. I had them locked down via installation folder too....
No biggie, I'll get it killed over the weekend!
No biggie, I'll get it killed over the weekend!
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users
Sign In
Create Account
Back to top









