| View previous topic :: View next topic |
| Author |
Message |
Duh_OZ Guest
|
Posted: Tue Jul 01, 2008 3:06 am Post subject: New variant? |
|
|
hxxp://xxx.bestlovelyric.com/mylove.exe
Just 2 reported 'suspicious'
Safe 7.0.17.0 2008.06.30 Suspicious File
Panda 9.0.0.4 2008.07.01 Suspicious file
I have NOD32 on my computer, it did report a possible NuWar variant.
NOD32 seems to not be reporting a crapload of files I submit to VT,
yet it always catches them on my end. |
|
| Back to top |
|
 |
| |
Ads |
Advertising
Sponsor
|
|
David H. Lipman Guest
|
|
| Back to top |
|
 |
| |
Ads |
Advertising
Sponsor
|
|
Duh_OZ Guest
|
Posted: Tue Jul 01, 2008 1:09 pm Post subject: Re: New variant? |
|
|
On Jul 1, 5:38 am, "David H. Lipman" <DLipman~nosp...@Verizon.Net>
wrote:
| Quote: |
Yes, looks like Storm Worm.
--
Yeah, getting plenty of them now. They came with a new 'hook' (you |
are in my heart, you belong to me, etc). Better than the other ones
saying I have a stupid face or I'm a moron LOL. |
|
| Back to top |
|
 |
| |
Ads |
Advertising
Sponsor
|
|
jen Guest
|
Posted: Tue Jul 01, 2008 5:57 pm Post subject: Re: New variant? |
|
|
"Duh_OZ" <ozzy.kopec@gmail.com> wrote in message
news:90f9f303-24d1-4958-b392-a48d3d9bd479@26g2000hsk.googlegroups.com...
| Quote: |
hxxp://xxx.bestlovelyric.com/mylove.exe
Just 2 reported 'suspicious'
Safe 7.0.17.0 2008.06.30 Suspicious File
Panda 9.0.0.4 2008.07.01 Suspicious file
I have NOD32 on my computer, it did report a possible NuWar variant.
NOD32 seems to not be reporting a crapload of files I submit to VT,
yet it always catches them on my end.
|
McAfee's analysis:
W32/Nuwar@MM!F6D2E5FF
http://vil.nai.com/vil/content/v_146477.htm
-jen |
|
| Back to top |
|
 |
| |
Ads |
Advertising
Sponsor
|
|
Guest
|
Posted: Mon Jul 14, 2008 4:09 pm Post subject: Re: New variant? |
|
|
On 1 jul, 15:09, Duh_OZ <ozzy.ko...@gmail.com> wrote:
| Quote: |
On Jul 1, 5:38 am, "David H. Lipman" <DLipman~nosp...@Verizon.Net
wrote:
Yes, looks likeStormWorm.
--
Yeah, getting plenty of them now. They came with a new 'hook' (you
are in my heart, you belong to me, etc). Better than the other ones
saying I have a stupid face or I'm a moron LOL.
|
I even get Nuwar (storm) spammed with a link to fake antivirus
programs.
~ Do not remove -* spamtrap *-
rekketoes@gmail.com
rekketoes[at]gmail.com |
|
| Back to top |
|
 |
| |
Ads |
Advertising
Sponsor
|
|
Duh_OZ Guest
|
Posted: Mon Jul 14, 2008 4:15 pm Post subject: Re: New variant? |
|
|
On Jul 14, 11:09 am, rekket...@gmail.com wrote:
| Quote: |
I even get Nuwar (storm) spammed with a link to fake antivirus
programs.
Got my first 'hook' like that today, but the link was down so I can |
only assume it was a link to malware LOL.
Damn things are still coming in daily ;-( |
|
| Back to top |
|
 |
| |
Ads |
Advertising
Sponsor
|
|
|