Author Topic: MSN spammed trojan  (Read 13897 times)

0 Members and 1 Guest are viewing this topic.

March 12, 2010, 11:54:39 am
Reply #15

sursmurf

  • Special Access
  • Full Member

  • Offline
  • *

  • 68

March 15, 2010, 04:05:17 pm
Reply #16

sursmurf

  • Special Access
  • Full Member

  • Offline
  • *

  • 68

March 30, 2010, 07:47:01 am
Reply #17

sursmurf

  • Special Access
  • Full Member

  • Offline
  • *

  • 68

April 05, 2010, 03:59:39 pm
Reply #18

sursmurf

  • Special Access
  • Full Member

  • Offline
  • *

  • 68
The tinyurl link is spammed in messenger:

Code: [Select]
http://tinyurl.com/y8bjz6k
-->
http://www.aliukani.com/php/htlog/
-->
http://www.aliukani.com/php/htlog/java.exe

Client.class [VT 8/39]
http://www.virustotal.com/analisis/1847338f2ad1a84f589b57f9f33fe06a72af8cbeea2c3f6d431bd4e0a113f137-1270482805

java.exe [VT 2/39]
http://www.virustotal.com/analisis/36d7d33fe2209ef397456aa611b0d1aa6442fb47a2bdd79e44912af709c96d66-1270482718

April 06, 2010, 02:00:40 pm
Reply #19

sursmurf

  • Special Access
  • Full Member

  • Offline
  • *

  • 68

April 09, 2010, 08:07:13 am
Reply #20

sursmurf

  • Special Access
  • Full Member

  • Offline
  • *

  • 68
Code: [Select]
http://msn-foto-view.com/image.php?=youremail@hotmail.com
http://facebook-foto.com/image.php?=youremail@hotmail.com

[VT 2/39]
http://www.virustotal.com/analisis/a7c68e3e86efba0d6d4f3db70f80c70624c07337b7ceaa29a6f7a52e9e278ae4-1270799953

Code: [Select]
http://yourmyspace-pic.com/image.php?=youremail@hotmail.com

[VT 2/39]
http://www.virustotal.com/analisis/f42f3e2128009c93fc7335ea7aba4f7f9e2a16d3a0136eda7779f6ca1444179a-1270800162

April 21, 2010, 10:30:59 am
Reply #21

sursmurf

  • Special Access
  • Full Member

  • Offline
  • *

  • 68

April 22, 2010, 12:50:09 pm
Reply #22

sursmurf

  • Special Access
  • Full Member

  • Offline
  • *

  • 68

May 24, 2010, 01:36:53 pm
Reply #23

sursmurf

  • Special Access
  • Full Member

  • Offline
  • *

  • 68
Code: [Select]
hXXp://tinyurl.com/facebook-photo-2010-05-22

                  --> hxxp://web.face-albums.com/images/facebook-photo-2010-05-22-jpg.scr
[VT 1/41]
http://www.virustotal.com/analisis/37ff9121b4a30c0c94006a6f9fb088f43c1c498ec101792b368047909f0c2b32-1274707234

That in turn downloads:
Code: [Select]
hXXp://face-albums.com/pict.exe
[VT 1/41]
http://www.virustotal.com/analisis/a831560dbe4214fd264c539c5182b0b008175421f89b88cd7ebfd33443bae43d-1274707493

May 28, 2010, 05:35:35 pm
Reply #24

sursmurf

  • Special Access
  • Full Member

  • Offline
  • *

  • 68