Keygen malware..suspicious_w32_malware!gemini.sh - avast does not detect!

Viruses and worms
1

Hi malware fighters,

Do not go to this Dutch keygen download site: http://www.threatlog.com/search/vorkfreekeys.org
See full threat path there, uploaded to Wepawet,
See scanning results:
http://wepawet.iseclab.org/view.php?hash=9b357427a8b0997b4467ad3a0090239d&t=1278161556&type=js
See malware results…
http://www.virustotal.com/analisis/434bc11f7b95e7b9be7b703a932c650b3dfa064377c9c7ec11b6d62a48aa9a8b-1278161508
Heuristic detection: http://www.f-secure.com/v-descs/suspicious_w32_malware!gemini.shtml

polonus

2

Send the sample in a password-protected archive to virus@avast.com
Make sure to write the password in the message box too!

3

yepp…i guess you learned Polonus a new trick there ;D