A new trojan

Viruses and worms
1
  1. Here is a new trojan for you database ( DrWeb reported this as Trojan.Muldrop) ( rename txt to zip. This zip is password protected with password “virus” )
  2. An issue. Make a virus signup form at your site ( or better in antivirus itself make a button “report unknown virus” or something"
2

Are you using avast ?

If so add it to the chest, use the avast chest to send the sample to avast.

We don’t want the avast support forums to be used as a repository for malware distribution, please remove the attachment. Either send it using the chest as suggested or Send the sample to virus (at) avast (dot) com zipped and password protected with the password in email body and undetected malware in the subject.

However, flip flopping the file type from zip to txt to be able to upload it corrupts the zip file into a flat file when it is saved to the forums, so trying to convert it back to a zip file fails to open as a zip file.

3

or scan it in virus total and the site will send a copy to every av vendor

4

Well that is meant to be the case, but some of the avast virus labs state that much of what comes from VT isn’t good. I much prefer to send it personally than rely on a third party.

5

+1

6

Hi Logos

1099511627776 is not giving a link to any live malware here and then only those logged in can download the txt file. Txt files are known not to infect but they can be flagged by av, then additionally I have every attachment here blocked with NoScript up…

polonus

7

Wrong, he was attaching what he thought was a zipped sample by changing the file type to .txt to get round the fact that the forum doesn’t accept zip files. The fact that he wasn’t aware that in attaching it as a .txt file would screw up the zip format is neither here nor there, the act was to deposit what was considered an infected sample on the forums.

So the statement I made is correct, "We don’t want the avast support forums to be used as a repository for malware distribution, please remove the attachment. "

Repository (the word I used), is also somewhat different from giving a direct link as the contents wouldn’t be stored on the avast forums.