Infected site scanned with DrWeb URL checker:
Checking: -http://fotosdetodos.com/lang/es.exe
Engine version: 5.0.2.3300
Total virus-finding records: 2919035
File size: 144.08 KB
File MD5: cf92dda49a91c36023ae0c094928f8c3
-http://fotosdetodos.com/lang/es.exe infected with Win32.HLLW.Autoruner1.5993
See: http://www.virustotal.com/url-scan/report.html?id=679bee6bfafcf0fe6012b5247b744e19-1323557052
Avast does not detect: http://www.virustotal.com/file-scan/report.html?id=17be29b1409cdcce9b51f4950c2fbe5745365e89c180ef5f959ae2309a973d1d-1323560814
Anubis analysis here: http://anubis.iseclab.org/?action=result&task_id=1da656335d9bb6b24e1c80cb3be44d2dd
reported to virus AT avast dot com
Site has Dropper/Win32.VB
and on: -http://fotosdetodos.com/lang W32/MalwareF.XPRT
file hash: b6b93f13194ea0b6a37337d3c847a2a3
polonus
