Mebroot detected, but also Blackhole exploit kit...

Viruses and worms
1

Hi forum friends,

For non-detected Blackhole exploit kit,
see: http://wepawet.iseclab.org/view.php?hash=268584bd4d0ca1e6dc8957d94f8ba854&t=1316811359&type=js
see: http://urlquery.net/report.php?id=3472
and http://siteinspector.comodo.com/public/reports/366829
Not detected here: http://www.garyshood.com/virus/results.php?r=0258dee0b98072a6837ac7aed7a880df
Domain also has link to Trojan Sinowal that avast detects: http://www.virustotal.com/file-scan/report.html?id=f2215e27bd3bcc43666bcfaf71498b8a891007f9f80f1ce2bd2d2050eb74882a-1316811775
reported to virus AT avast dot com

polonus

2

This is also found in that hole

http://www.virustotal.com/file-scan/report.html?id=120f5eeab6205d159aa409f7804fc7744d2cb9249c997579c2461e9bccbd4ddb-1316816401

http://www.virustotal.com/file-scan/report.html?id=f2215e27bd3bcc43666bcfaf71498b8a891007f9f80f1ce2bd2d2050eb74882a-1316816818

http://www.virustotal.com/file-scan/report.html?id=b0d1849c9ed0f80767aa4ac8cfea96b322b9359f74305f2f684231d572d057d4-1316816822

3

Hi Pondus,

Another Blackhole exploit kit site found: http://anubis.iseclab.org/?action=result&task_id=1f458ae98025edbe4e5b02f958d26c1eb
Site also with Trojan/Win32.FakeAV not detected by avast
: http://www.virustotal.com/file-scan/report.html?id=bbe70bd908d2ca481f88a785068c91830af40c024df35b1d11c696bb337ee775-1316865775
http://www.virustotal.com/file-scan/report.html?id=13fcadea5431e3c3cb5a3cbd744b5e0afd9d16eb91cfd5436ec62c5f9ecf32e0-1316865768
http://www.virustotal.com/file-scan/report.html?id=73bf8e626e799462fe6a09d65103f0187f299edef92f261ad998ee7d3256a6fb-1316865781
reported to virus AT avast dot com

polonus