11 replies to this topic

[MysteryFCM]

Got notified of this one via e-mail by an hpHosts user (would've posted it sooner but was working on an hpObserver update)

Host: malware-doc.com
IP: 193.138.172.5 (AS44245)

Family:
http://hosts-file.ne....5&view=matches

[Azlan]

Please add this to the definitions..!!! Fast!! My clean virtual machine is now infected...!!

[Jaxryley]

Azlan, on Feb 18 2009, 09:38 PM, said:

Please add this to the definitions..!!! Fast!! My clean virtual machine is now infected...!!

Turn off and delete changes?

Surely you have Undo Disks - Enabled?

[Fatdcuk]

Azlan, on Feb 18 2009, 01:38 PM, said:

Please add this to the definitions..!!! Fast!! My clean virtual machine is now infected...!!

Please update and run MBAM quick scan

DB 1775 included defs to take down this rogue install.

http://www.malwarebytes.org/malwarenet.php...gue.MalwareDoc+

[Azlan]

Fatdcuk, on Feb 18 2009, 11:38 PM, said:

Please update and run MBAM quick scan

DB 1775 included defs to take down this rogue install.

http://www.malwarebytes.org/malwarenet.php...gue.MalwareDoc+

K thanks. I just deleted it with Hijackthis

[Serious]

People using Kaspersky should be protected from this threat as of Yesterday

Kaspersky Threat Name: not-a-virus:FraudTool.Win32.MalwareDoctor.a
Who reported this? Me

[vasketo]

Serious, on Feb 19 2009, 12:01 PM, said:

People using Kaspersky should be protected from this threat as of Yesterday

Kaspersky Threat Name: not-a-virus:FraudTool.Win32.MalwareDoctor.a
Who reported this? Me

Congratulations!! You won a sweet

[Raid]

Our defs automatically kill it, but just to make sure, I've added the latest rendition of it's executables...

[Michael Townsend]

What if you are caught inbetween? I did not install this malware but my IE pages are still stuck to IP BLOCKED BY XYZ (Yahoo, Google, MSN) due to Malware install this to fix.... , trying to get me to install MALWARE DOC, I have run Malwarebytes with db 1814. But I am still being reditrected. Malware Bytes (Quick and Full scans) and SPYBOT both show clean bills of health.

[Michael Townsend]

already tried WINSOCKFIX no dice.

[MysteryFCM]

Please see;

http://www.malwareby...?showtopic=9573