[Jaxryley]

For testings and drops quite a few other exploits.

kav.exe - 20/42 - MS - VirTool:WinNT/Rootkitdrv.LH
http://www.virustotal.com/file-scan/rep ... 1283302046

kav.rar

(34.93 KiB) Downloaded 62 times

ApsX85.sys file dropped.
3/42 - Rootkit.Win32.Agent!IK
http://www.virustotal.com/file-scan/rep ... 1283305063

ApsX85.rar

(4.49 KiB) Downloaded 58 times

[Meriadoc]

Creates rootkit component in %Windir%\system32\drivers\random.sys, BHO in %Windir%\system32\random.dll.

Installs rootkit as service, registry HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\random, installs BHO, backdoor, changes home page from list.

VT - http://www.virustotal.com/file-scan/rep ... 1306590843

http://www.virustotal.com/file-scan/rep ... 1306593871

.sys - http://www.virustotal.com/file-scan/rep ... 1306594826

.dll - http://www.virustotal.com/file-scan/rep ... 1306595781