Hi forum friends,
30 scanners detect, avast misses.
See: http://www.virustotal.com/url-scan/report.html?id=8a6bada1695a06ff51f8f90fa4134599-1324294968
and
http://www.virustotal.com/file-scan/report.html?id=c1c33a9574db9bc6615bcfec6d3338959de9c6bf7f8dd974c0a554feb5feae0c-1324335881
See DrWeb URL scanner detecting:
Checking: -http://wrzucacz.pl/download/7451324298991
Engine version: 5.0.2.3300
Total virus-finding records: 2951654
File size: 2.27 MB
File MD5: e75407885b87467d59a12cfced5983d2
-http://wrzucacz.pl/download/7451324298991 - archive RAR
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\elfbot.dll packed by ZLIB
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\elfbot.dll - archive BINARYRES
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\elfbot.dll/data001 - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\elfbot.dll - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\elfbot.ini - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\elfload.dll infected with Trojan.MulDrop1.39679
Found on infected systems and resists interrogation by security products
Uses low level functions to hide itself from the user and from system/security processes
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\elfload2.dll - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\elfsettings\elflock459.log - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\elfsettings\lootitems.txt - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\elfsettings\outfits.txt - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\elfsettings\serverlist.txt - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\help.url - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\loader.exe - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\loader.url - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\navserv.exe - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\navserv.ini - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\skins\areao4.msstyles - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\skins\Azenis2.msstyles - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\skins\Nion Redux.msstyles - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\skins\RFwdwork.msstyles - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\sounds\defaultmessage.wav - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\sounds\disconnected.wav - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\sounds\elfng.wav - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\sounds\gmdetected.wav - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\sounds\monster.wav - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\sounds\playerattacking.wav - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\sounds\playeronscreen.wav - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\sounds\privatemessage.wav - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\unins000.dat - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\unins000.exe - archive BINARYRES
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\unins000.exe/data001 - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\unins000.exe - Ok
-http://wrzucacz.pl/download/7451324298991/ElfBot NG8.6\USkin.dll - Ok
reported to virus AT avast dot com
polonus