Samples missed by avast (VirusTotal links only!)

Viruses and worms
1

As my first thread get hijacked and closed without even warning me :P, I’m starting a new one trying to help avast improving detection if possible.
Please, post only VirusTotal links and do not post links to malware!
You can always submit a sample through Chest or zip it and send to virus(at)avast(dot)com.

Guideline for posting links which make some sense:

2

Cassino game virus? http://www.virustotal.com/file-scan/report.html?id=16677001425a2306a4fadd980e84b048e8638972ca5b760c27de5afba43a7dd6-1284977670

Trojan downloader? http://www.virustotal.com/file-scan/report.html?id=b155f733a4a76a5f2f1cf2bedfa0cbf998d5ea483e7061f54d9d54a325ad1358-1284903634
http://www.virustotal.com/file-scan/report.html?id=3d1a0e751c8807d1add568576bae8709a8a4661bcd5add8924cc8509f2987d4b-1284975567

Zbot sample? http://www.virustotal.com/file-scan/report.html?id=87d184e9a44e628e217d89b91edff75474e0f682a68a26ac9d6ab650b7249d12-1284979078
http://www.virustotal.com/file-scan/report.html?id=8767ed77b8dc95cdae010d2241385c0e4ae376796024822eae41653a0f76ceab-1284967493

Kazi sample? http://www.virustotal.com/file-scan/report.html?id=2920cba61b1b33d94efdf09458562dc03595aa1d1cddc0135f7e060f9174c011-1284819562

Renos sample? http://www.virustotal.com/file-scan/report.html?id=52c65496937759dee1e63dd533fa3f0d6ff87beae1734f81c56896d71e7b9e6e-1284743283

Suspicious? http://www.virustotal.com/file-scan/report.html?id=43dfad5c0c2e4a3c6cc8e7955b0f0380f9fedf70765770e6c1f3dec05c79c653-1284978756

3

http://www.virustotal.com/file-scan/report.html?id=8b66cd525e28891f8d57bb1c7ea502c1f61e9d3dd9deb7045b744d9b41e460e5-1284986446

4

http://www.virustotal.com/file-scan/report.html?id=6b60b0e9007c7e6d5f7b8d560ec2b2c575f5df5f2169a5e2f096e9376785033e-1284998326
Trojan dropper: http://www.virustotal.com/file-scan/report.html?id=c6373b689fb84cadfcf62efeda2693be7edc829c74caa37f248c270e9959b136-1284999866
Trojan? http://www.virustotal.com/file-scan/report.html?id=9c6049c7cef384e2e57ebefc24186c8fedc10420d39f7b35e03500b214dd80dd-1284994178
Renos sample? http://www.virustotal.com/file-scan/report.html?id=0153b95db49bb9150c9dbd35bb5eb520c852888ce7921cf30bc32de829a99b56-1284982191

5

Trojans?

http://www.virustotal.com/file-scan/report.html?id=f28dafcaf4c723342f53a43ad4cd7980bde5d7d48e6b677cbf0018974ec376f9-1280972203
http://www.virustotal.com/file-scan/report.html?id=543b88457cd1d956fdf0712a07777d10dbb1189b61b58d7ae0e0e8de96664bef-1283388730

6

Renos or FakeAV
http://www.virustotal.com/file-scan/report.html?id=20d7c5fa8ebdc2bbbbafc93d2ee04b90604d12d4696fae69dcf49514b37697a5-1285017531

7

Trojan-Downloader

http://www.virustotal.com/file-scan/report.html?id=dfb116c2c4687fb27ec2c9252e9c5296708c0f201255b7abadaa68e488a60b2a-1285060322

8

Virut? http://www.virustotal.com/file-scan/report.html?id=087cb18f688665a7a05fbea067df6b5d44d35a6b95808e7601698d69e8330181-1285062806
Suspicious: http://www.virustotal.com/file-scan/report.html?id=42bc40621711772252eeec7b0a9e4a55e97f9f21c8e87426d1a4948f951a0ccb-1285062639
Buski? http://www.virustotal.com/file-scan/report.html?id=bcb9dcea286bbb8612f57172013197a0c397e15091d89f9716dfba3b7d182dcb-1285067075

Sent by IM to Maxx the links to download (some of) the samples.

9

Undetected malware http://www.virustotal.com/file-scan/report.html?id=0204be4d8b3a25c58975a0db406fe1cc6e61d3af19d61cc2ea9b2a5db68896ae-1285088907

10

New nagware / rogue, NavaShield ( navashield.com ) see video http://www.youtube.com/watch?v=0hxFyDpfcg0
Malwarebytes / Ad-Aware / F-Secure have added detection, 53mb installer

11

http://www.virustotal.com/file-scan/report.html?id=994a5bc0e21a3b89441e5b70720ef6ba62aa9a0d4a71b33e995766d1d12007f4-1285185342
::slight_smile:

12

A new rogue A/V program.

http://www.virustotal.com/file-scan/report.html?id=f901ce8b019eca2ddb850fb0783196f28bd3ad33bb321d995371a00b00c70fda-1285225279

13

Another rogue A/V program.

http://www.virustotal.com/file-scan/report.html?id=32582fc3673aba5e57b14b40a2f60ce975afec06a88b9d717661b5f497724ab3-1285296706

And a Trojan.

http://www.virustotal.com/file-scan/report.html?id=52efcdbdf08321cf1fb645c92c97378bde509dda3c15622d96276332284f80f6-1285307240

I’ve spent the evening passing these around.

14

http://www.virustotal.com/file-scan/report.html?id=e7e2d69c740ca5009ed76f191e2b6706b283f58f8a0fdc1054841929dddee7a1-1285349976

15

Possible Trojan.

http://www.virustotal.com/file-scan/report.html?id=d7dbb27f2eb5772d33362645bac7392c2699b08a69e8d8b0d39f98f7dcaaac08-1285371168

And another.

http://www.virustotal.com/file-scan/report.html?id=b9cbec787f7d72c3072bb70d611a47bdeee319a9bc28b65d473f3235b0a5eb8e-1285396797

16

damnit, read the topic name - virustotal links only

17

Know.Purposely !

18

@Burkoff

as you see in the topic name VIRUS TOTAL LINK ONLY

this is what happend the last time http://forum.avast.com/index.php?topic=63749.0 see the two the last post`s

so edit the post and remove the download link`s

19

yeah and Burkoff was already responsible last time, since he’s doing that again I suggest a ban.

20

Send the samples to Avast! via the interface (trough the chest) or otherwise (don’t remember how) NOT POST THEM HERE!