Jump to content


Photo

RSIT.exe


  • Please log in to reply
9 replies to this topic

#1 Tigger93

Tigger93

    Forum Deity

  • Moderators
  • PipPipPipPipPipPip
  • 1,668 posts
  • Gender:Male

Posted 28 October 2008 - 08:07 PM

http://forums.thatco...mp;#entry141193

Files Infected:
C:\Documents and Settings\subin origon\Desktop\RSIT.exe (Trojan.Agent) -> No action taken.

Used by us to help with the removal of malware.

#2 SpySentinel

SpySentinel

    Forum Deity

  • Experts
  • PipPipPipPipPipPip
  • 1,848 posts
  • Gender:Male
  • Location:The United States
  • Interests:Fighting/Analyzing Malware & Social Media

Posted 28 October 2008 - 08:31 PM

Hey Tigger93, you beat me too it :)
Matt Russo
Social Media Specialist

Posted Image

Follow us: Twitter, Become a fan: Facebook

#3 nosirrah

nosirrah

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 5,452 posts
  • Gender:Male
  • Location:Northampton, MA USA

Posted 28 October 2008 - 08:52 PM

I need a dev log , link to file or file attached please .
Bruce Harrison
Vice President of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#4 Tigger93

Tigger93

    Forum Deity

  • Moderators
  • PipPipPipPipPipPip
  • 1,668 posts
  • Gender:Male

Posted 28 October 2008 - 09:18 PM

http://images.malwar...random/RSIT.exe

#5 sho-dan

sho-dan

    कैंसर योद्धा

  • Malware Hunters
  • PipPipPipPipPipPip
  • 3,227 posts
  • Gender:Not Telling
  • Location:Jah Jersey Shore

Posted 28 October 2008 - 09:58 PM

Hello Bruce

The OP is using an outdated version in said post.

Malwarebytes' Anti-Malware 1.25
Database version: 1062
Windows 5.1.2600 Service Pack 2

#6 nosirrah

nosirrah

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 5,452 posts
  • Gender:Male
  • Location:Northampton, MA USA

Posted 28 October 2008 - 10:48 PM

I cant replicate this , strings , MD5 and heu all miss .
Bruce Harrison
Vice President of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#7 nosirrah

nosirrah

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 5,452 posts
  • Gender:Male
  • Location:Northampton, MA USA

Posted 28 October 2008 - 10:50 PM

Malwarebytes' Anti-Malware 1.25
Database version: 1062
Windows 5.1.2600 Service Pack 2

And here is why .
Bruce Harrison
Vice President of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#8 nosirrah

nosirrah

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 5,452 posts
  • Gender:Male
  • Location:Northampton, MA USA

Posted 28 October 2008 - 11:15 PM

lol sorry sho-dan , was not paying attention
Bruce Harrison
Vice President of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#9 Tigger93

Tigger93

    Forum Deity

  • Moderators
  • PipPipPipPipPipPip
  • 1,668 posts
  • Gender:Male

Posted 29 October 2008 - 04:01 PM

Sorry, I wasn't paying attention to the version, I just posted here from another forum.

#10 sho-dan

sho-dan

    कैंसर योद्धा

  • Malware Hunters
  • PipPipPipPipPipPip
  • 3,227 posts
  • Gender:Not Telling
  • Location:Jah Jersey Shore

Posted 29 October 2008 - 06:28 PM

no worry, be happy :)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users