Malware submissions

Viruses and worms
1

avast!: all
OS: all

Trojan.Banker

File name: Calculations.exe
Submission date: 2011-10-22 05:08:59 (UTC)
First seen: 2011-10-20 23:10:22
Last seen : 2011-10-22 05:08:59
VT Results: 22/ 43 (51.2%)
MD5: 896844c546b9d9d493ef0020ca9bb981
http://www.virustotal.com/file-scan/report.html?id=a550af7e152a14405577c720077a2193c8d7cf6bcbbe571818929ad83672bbc4-1319260139

======

Backdoor:Win32/Hupigon.CK

File name: 10.exe
Submission date: 2011-10-22 07:47:07 (UTC)
First seen: 2011-10-21 14:21:20
Last seen : 2011-10-22 07:47:07
Result: 18/ 43 (41.9%)
MD5: 9c128b0dc4110d7c834cd606fe608fa7
http://www.virustotal.com/file-scan/report.html?id=419514e38425946efa95832e6bc895dbdb546f8b255ca9141ffe744bb683dd13-1319269627

this file may also be tainted with Virut ???

=======

files submitted: 22.10.2011 11:24
Ticket ID: ABK-315577

2

Your VT links don’t appear to work, they are just opening the default VT submissions page. So I don’t know if that is an isue at VT or a problem with the links.

These seem to work: http://www.virustotal.com/file-scan/report.html?id=a550af7e152a14405577c720077a2193c8d7cf6bcbbe571818929ad83672bbc4-1319159757
http://www.virustotal.com/file-scan/report.html?id=419514e38425946efa95832e6bc895dbdb546f8b255ca9141ffe744bb683dd13-1319206880

Send the sample/s to avast as a Undetected Malware:
Open the chest and right click in the Chest and select Add, navigate to where you have the sample and add it to the chest (see image). Once in the chest, right click on the file and select ‘Submit to virus lab…’ complete the form and submit, the file will be uploaded during the next update. Note: manually adding to the chest doesn’t remove them from the original location, so they still have to be dealt with in that location.
Or
Send the sample to virus (at) avast (dot) com zipped and password protected with the password in email body, a link to this topic might help and undetected malware in the subject.

EDIT: addition of VT URLs, based on MD5s.

3

sorry bout the VT links, the first one works but the second one seems to be broken. the VT links you posted based on the MD5’s are correct.

these two samples have been submitted through support Ticket ID: ABK-315577 & Ticket ID: RFB-173666

4

But does your support ticket allow for the attachment of the samples ?

If not then the physical sample should be sent as outlined.
Or

  • There is an on-line contact form, http://www.avast.com/contact-form.php?loadStyles for: * Sales inquiries; Technical issues; Website issues; Report false virus alert in file; Report false virus alert on website; Undetected Malware; Press (Media), issues.

If reporting a undetected malware, then select that option and using the Browse… button, navigate to the file.