Anti Virus Talk
Anti Virus Talk
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

New variant?

 
Post new topic   Reply to topic    Anti Virus Talk Forum Index -> Anti Virus Talk
View previous topic :: View next topic  
Author Message
Duh_OZ
Guest





PostPosted: Tue Jul 01, 2008 3:06 am    Post subject: New variant? Reply with quote

hxxp://xxx.bestlovelyric.com/mylove.exe

Just 2 reported 'suspicious'

Safe 7.0.17.0 2008.06.30 Suspicious File
Panda 9.0.0.4 2008.07.01 Suspicious file

I have NOD32 on my computer, it did report a possible NuWar variant.
NOD32 seems to not be reporting a crapload of files I submit to VT,
yet it always catches them on my end.
Back to top
  Ads
Advertising
Sponsor


David H. Lipman
Guest





PostPosted: Tue Jul 01, 2008 11:03 am    Post subject: Re: New variant? Reply with quote

From: "Duh_OZ" <ozzy.kopec@gmail.com>

| hxxp://xxx.bestlovelyric.com/mylove.exe

| Just 2 reported 'suspicious'

| Safe 7.0.17.0 2008.06.30 Suspicious File
| Panda 9.0.0.4 2008.07.01 Suspicious file

| I have NOD32 on my computer, it did report a possible NuWar variant.
| NOD32 seems to not be reporting a crapload of files I submit to VT,
| yet it always catches them on my end.

Yes, looks like Storm Worm.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
Back to top
  Ads
Advertising
Sponsor


Duh_OZ
Guest





PostPosted: Tue Jul 01, 2008 1:09 pm    Post subject: Re: New variant? Reply with quote

On Jul 1, 5:38 am, "David H. Lipman" <DLipman~nosp...@Verizon.Net>
wrote:
Quote:

Yes, looks like Storm Worm.

--
Yeah, getting plenty of them now. They came with a new 'hook' (you

are in my heart, you belong to me, etc). Better than the other ones
saying I have a stupid face or I'm a moron LOL.
Back to top
  Ads
Advertising
Sponsor


jen
Guest





PostPosted: Tue Jul 01, 2008 5:57 pm    Post subject: Re: New variant? Reply with quote

"Duh_OZ" <ozzy.kopec@gmail.com> wrote in message
news:90f9f303-24d1-4958-b392-a48d3d9bd479@26g2000hsk.googlegroups.com...
Quote:
hxxp://xxx.bestlovelyric.com/mylove.exe
Just 2 reported 'suspicious'
Safe 7.0.17.0 2008.06.30 Suspicious File
Panda 9.0.0.4 2008.07.01 Suspicious file
I have NOD32 on my computer, it did report a possible NuWar variant.
NOD32 seems to not be reporting a crapload of files I submit to VT,
yet it always catches them on my end.

McAfee's analysis:
W32/Nuwar@MM!F6D2E5FF
http://vil.nai.com/vil/content/v_146477.htm

-jen
Back to top
  Ads
Advertising
Sponsor


Guest






PostPosted: Mon Jul 14, 2008 4:09 pm    Post subject: Re: New variant? Reply with quote

On 1 jul, 15:09, Duh_OZ <ozzy.ko...@gmail.com> wrote:
Quote:
On Jul 1, 5:38 am, "David H. Lipman" <DLipman~nosp...@Verizon.Net
wrote:

Yes, looks likeStormWorm.

--

Yeah, getting plenty of them now.   They came with a new 'hook' (you
are in my heart, you belong to me, etc).   Better than the other ones
saying I have a stupid face or I'm a moron LOL.

I even get Nuwar (storm) spammed with a link to fake antivirus
programs.

~ Do not remove -* spamtrap *-
rekketoes@gmail.com
rekketoes[at]gmail.com
Back to top
  Ads
Advertising
Sponsor


Duh_OZ
Guest





PostPosted: Mon Jul 14, 2008 4:15 pm    Post subject: Re: New variant? Reply with quote

On Jul 14, 11:09 am, rekket...@gmail.com wrote:
Quote:

I even get Nuwar (storm) spammed with a link to fake antivirus
programs.

Got my first 'hook' like that today, but the link was down so I can

only assume it was a link to malware LOL.

Damn things are still coming in daily ;-(
Back to top
  Ads
Advertising
Sponsor


Display posts from previous:   
Post new topic   Reply to topic    Anti Virus Talk Forum Index -> Anti Virus Talk All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Australian Debt Consolidation Experts
medical insurance
Wedding Website
ESCORTFORUM: recensioni di escort e girl
Rencontres Sexuelles Changistes
Computer Software Talk
Car Insurance
Make Your Own Website
Cheap phone calls to Pakistan
Cleaning Service
toxic mold
UK Swingers Genuine Contacts Site
floor machines
Hoover Vacuum Bags


Board Security

126 Attacks blocked

Powered by phpBB © 2001, 2005 phpBB Group