system
1
Hi!
Why don’t you have added a virus to the database?
A few days ago i am send you a virus (file name: GUESTS_IH.exe) that steals passwords to the Russian social network (www.vkontakte.ru).
The virus modifies the HOSTS file, then loaded the pirate page instead of original, you enter the password and send it to hackers!
I have attached a description, but the virus has not been added! Why? Perhaps because the sites at which to redirect not working now?
Virustotal report:
http://www.virustotal.com/file-scan/report.html?id=9989f97eda5701283d4bb1bbaa19599b20ede44430f2d5abf7b81536c23c62b8-1314527827
Question №2 (the main):
Why Avast not responds to changes in HOSTS file?
Thx.
Pondus
2
how to send samples
In mail
send to virus @ avast.com in a password protected zip.file ( recomended 7zip or rar )
Mail subject: undetected sample
zip.file password: infected
sending from avast chest
Moving files to avast! chest
http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=501#idt_03
Submitting files from the Virus Chest to avast! Virus Lab
http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=501#idt_07
from website - see dropp down menu ( report of undetected malware )
http://www.avast.com/en-no/contact-form.php?loadStyles&subject=SALES
system
3
I have used both of these methods + short discription of virus.
Screenshot of mail:
http://s002.radikal.ru/i197/1108/cb/303ed8aa5ae1t.jpg
Pondus
4
detected by Malwarebytes as Trojan.Qhost
not detected by SAS - have submited
ThreatExpert
http://www.threatexpert.com/report.aspx?md5=0e41f2a500a22d02a16d49bafd9f5cf4
Pondus
5
