Jump to content

Malwarebytes

TR/Downloader; TR/AVKiller; SPY/QHost


1 reply to this topic

#1
Guest_remixed_*

  • Guests
"TSKILL messenger.exe"
"TSKILL messenger"
"TSKILL WindowsDefender.exe"
"TSKILL WindowsDefender"
"TSKILL GoogleUpdate"
"TSKILL GoogleUpdate.exe"

http://www.vymar.cz/images/MSINET.OCX 
http://www.vymar.cz/images/1.gif  (1.exe) = GoogleUpdate.exe
http://www.vymar.cz/images/t1.gif  (t1.exe) = KillAV list
http://www.vymar.cz/images/imagem.gif (imagen.exe)
http://www.vymar.cz/images/ki.gif  (ki.exe)
http://www.vymar.cz/images/MailR.gif (mailR.exe)
http://www.vymar.cz/images/kWab.gif  (kwab.exe)
http://www.vymar.cz/images/simple.gif  (simple.exe)
http://www.vymar.cz/images/FTP.gif (FTP.exe)


#2
Fatdcuk

    Malware BBQ'er

  • Moderators
  • PipPipPipPipPipPip
  • 16,155 posts
  • Gender:Male
  • Location:127.0.0.1
Many thanks Remixed,

imagem.gif is The Avenger,renaming to .exe extension forces the icon out :)

Have now added the URL's for harvesting :)
Ade Gill
Research Engineer

Posted Image

Follow us: Twitter, Become a fan: Facebook





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us