See: http://zulu.zscaler.com/submission/show/d29138ff3757eb7440a088cd2b2d4899-1346083384
and https://www.virustotal.com/file/7a8c4ef2482c3e476137fd052feb92c5731d74ce25a1f94504c6cc6c2aaa6487/analysis/1345735640/
also flagged here: http://www.mywot.com/en/scorecard/bobinlaminasyonmakinalari.com/comment-49193757
polonus
Also see this one: http://urlquery.net/report.php?id=147730
and
https://www.virustotal.com/file/406548af908ecaa3c8d21cb6bfe2f94c3bfa524f72dbed522d963b0c6f31216d/analysis/1346071621/
4AqocD.exe · 899,exe · 後繼有毒 · setup.jpg · hxxp://restedstream.com/mi … 【萌】我愛Zbot · Win8Security_scanner.exe · 892.exe 0 / 42 · ErZ.exe · 894.exe
cloaked malware
Is a heuristical detection, so there is room for a FP…
reported to virus AT avast dot com,
polonus
Hi Pol,
the second one you reported to avast labs looks similar to the one posted here: http://forums.malwarebytes.org/index.php?showtopic=114903
Hi true indian,
It is not the same, but it is comes from the same source.
polonus