What malware is this? [SOLVED]

Viruses and worms
1

See: http://wepawet.iseclab.org/view.php?hash=bef269938c6b9b10a70514a23020d1bf&t=1314740404&type=js
Found to be benign there, but according to me it is suspicious.
Also found to be suspicious here: http://siteinspector.comodo.com/public/reports/279840
and here: http://urlquery.net/report.php?id=2229
Crime Pack Exploit kit and spoof page?

polonus

2

Hi forum friends,

The specific kit involved is called Crimepack, as they so helpfully included in their exploit code, see attached, to achieve the browser-exploit kit interaction. Maybe there is a connection to Zbot infection or Trojan-downloader Java infection, as they seem to use a number of of random 8-bit characters, used in massive phishing campaigns. Should avast flag such code?
Binairies analyzed here:
http://anubis.iseclab.org/?action=result&task_id=1102421ddeae08c6441a3d902b8e74b48

polonus

3

VirusTotal - nolock.htm - 12/43
http://www.virustotal.com/file-scan/report.html?id=d620d9ac0ef3a13844b697815e15f8489328c57f24a0a03681bd38718eef1ac1-1314814555

4

Hi Pondus,

Thank you, so we are protected against JS:Downloader-ABU [Trj] by avast,

polonus