4 replies to this topic

[nosirrah]

This is the new Zlob direct install rogue .

http://virusray.com/

[fredvries]

Cool, they have the same logo as SpyLocked, SpywareLocked, SpywareLocker, VirusProtectPro, VirusLocker and AntiVirGear.

SpyBot doesn't detect it yet but recognizes parts of it as SmitFraud-C, VirusLocker and VirusProtectPro.

[ctrlaltdelete]

[url="http://www.threatexpert.com/report.aspx?ui...1b-3e7b80f0bf03"][url="http://www.threatexpert.com/report.aspx?ui...1b-3e7b80f0bf03"]http://www.threatexpert.com/report.aspx?ui...1b-3e7b80f0bf03[/url][/url]


File vray_setup.exe received on 10.22.2007 15:02:09 (CET)Antivirus Version Last Update Result
AhnLab-V3 2007.10.22.0 2007.10.22 -
AntiVir 7.6.0.27 2007.10.22 -
Authentium 4.93.8 2007.10.22 -
Avast 4.7.1051.0 2007.10.21 Win32:Spycrush-B
AVG 7.5.0.488 2007.10.22 -
BitDefender 7.2 2007.10.22 -
CAT-QuickHeal 9.00 2007.10.20 -
ClamAV 0.91.2 2007.10.22 -
DrWeb 4.44.0.09170 2007.10.22 -
eSafe 7.0.15.0 2007.10.21 -
eTrust-Vet 31.2.5230 2007.10.22 -
Ewido 4.0 2007.10.22 -
FileAdvisor 1 2007.10.22 -
Fortinet 3.11.0.0 2007.10.19 -
F-Prot 4.3.2.48 2007.10.22 -
F-Secure 6.70.13030.0 2007.10.22 -
Ikarus T3.1.1.12 2007.10.22 Virus.Win32.Spycrush.B
Kaspersky 7.0.0.125 2007.10.22 -
McAfee 5145 2007.10.19 -
Microsoft 1.2908 2007.10.22 Program:Win32/VirusLocker
Norman 5.80.02 2007.10.22 -
Panda 9.0.0.4 2007.10.21 -
Prevx1 V2 2007.10.22 -
Rising 19.46.02.00 2007.10.22 Hack.Win32.VirusProtectPro.a
Sophos 4.22.0 2007.10.22 -
Sunbelt 2.2.907.0 2007.10.20 -
Symantec 10 2007.10.22 -
TheHacker 6.2.9.104 2007.10.22 -
VBA32 3.12.2.4 2007.10.22 -
VirusBuster 4.3.26:9 2007.10.21 -
Webwasher-Gateway 6.0.1 2007.10.22 -

Additional information
File size: 3265960 bytes
MD5: b846dfe59d0716ca0cf716d7a182a677
SHA1: 944ec1aec29f2a58cec249e18fdfab163cd8c72c
packers: Armadillo

[Hardhead]

VirusRay TECHNICAL DETAILS

http://www.symantec.com/business/security_...-99&tabid=2

[SwampDiner]

Added to newest database.