DDoS.Siggen.477 only detected by DrWeb’s: Checking: htxp://www.vampiremoli.com/kernel/hair.jpg
Engine version: 7.0.2.4281
Total virus-finding records: 2903915
File size: 44.00 KB
File MD5: 46f190d23e81e317b487452158bc669f
htxp://www.vampiremoli.com/kernel/hair.jpg infected with DDoS.Siggen.477
Analysis remarks for: htxp://anubis.iseclab.org/?action=result&task_id=136a83fb8cd9441c465a9ff6e2a0894f4&format=html
chat mode console multiclient - writes to foreign mem areas - trojan downloader control code found: 0x00090028
Unknown security failure in CorExitProcess mscoree.dl
Get ActiveWindowMessageBoxAuser32.dll
no bad events found for requested IP on honeypots. Therefore detection could be because of encryption…
Check if this is a FP or genuine detection?
polonus