Trojan Undetected By Bitdefender
Attached zip file;
encrypted with password:
infected
===========================
VirusTotal report:
http://www.virustotal.com/analisis/5b2f9e9...c6ef81941322a69
===========================
AntiVir==TR/Spy.Gen
AVG==Dialer.SDE
DrWeb==BackDoor.Goth.origin
F-Secure==Trojan.Win32.Dialer.axq
Fortinet==W32/Heuri.AXQ!tr
Ikarus==Virus.Trojan.Win32.Dialer.axq
Kaspersky==Trojan.Win32.Dialer.axq
McAfee==Generic BackDoor.t
Rising==Trojan.Win32.Undef.fre
VBA32==Trojan.Win32.Dialer.axq
VirusBuster==Dialer.Gh0st.Gen
Webwasher-Gateway==Trojan.Spy.Gen
File size: 119808 bytes
MD5...: f0d8488d447c2ab9a9541c8efd047f52
SHA1..: f269e89951df8b764977b3dfeedade5dbb93fe23
SHA256: 4e079bb8c0efb24a46a8ce601ab508b24191f26beda9f6a8da0de1ad7f29c936
SHA512: d7a343fec171342d4a8c53b451f0fe98dedb5a6547d7ce192d3ad591cbfdede7
2c1633ff673e90eaa85367730d7c4908db9eba655c363c917be5acc2c3823d96
PEiD..: Armadillo v1.71
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x4021f0
timedatestamp.....: 0x4804ca9e (Tue Apr 15 15:32:46 2008)
machinetype.......: 0x14c (I386)
( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x501a 0x5200 6.52 39c97c60e8bf399e28e080495939d2f6
.rdata 0x7000 0xdee 0xe00 5.23 a4596ed46664a8df38cf3838c6c2e2d7
.data 0x8000 0x2cdc 0x2800 1.02 da7a87196c33c5f73716b8139347dc41
.rsrc 0xb000 0x14660 0x14800 6.13 9eb1c4f9f0091db9dfecfc657db08185
( 3 imports )
> KERNEL32.dll: FindResourceA, lstrcatA, GetTempPathA, ExitProcess, lstrcpyA, lstrlenA, lstrcmpiA, SetLastError, GetLastError, GetFileAttributesA, GetSystemDirectoryA, FreeLibrary, LoadResource, LoadLibraryA, GetModuleFileNameA, SetUnhandledExceptionFilter, ReleaseMutex, CreateMutexA, GetCommandLineA, CopyFileA, OutputDebugStringA, GetStringTypeA, LCMapStringW, CreateFileA, SystemTimeToFileTime, LocalFileTimeToFileTime, SetFileTime, SizeofResource, WriteFile, DeleteFileA, CloseHandle, MoveFileA, SetFileAttributesA, GetProcAddress, RtlUnwind, RaiseException, GetModuleHandleA, GetStartupInfoA, GetVersion, HeapAlloc, HeapFree, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, SetHandleCount, GetStdHandle, GetFileType, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, HeapReAlloc, IsBadWritePtr, IsBadReadPtr, IsBadCodePtr, GetCPInfo, GetACP, GetOEMCP, MultiByteToWideChar, LCMapStringA, GetStringTypeW
> USER32.dll: wsprintfA
> ADVAPI32.dll: CreateServiceA, OpenServiceA, StartServiceA, OpenSCManagerA, CloseServiceHandle, RegCreateKeyA, RegOpenKeyExA, RegQueryValueExA, RegCloseKey, RegSetValueExA
( 0 exports )
/applications/core/interface/file/attachment.php?id=1923" data-fileid="1923" rel="">server.zip
