[kalptarunet]

Hi!

Looking Backdoor.Proxybox sample, please find details below.

MD5: 86908d0c072ce28a7650b78bab5a06e5
File size: 21.0 KB ( 21504 bytes )

%SystemDrive%\Documents and Settings\All Users\Application Data\Adobe\sp.dll
%SystemDrive%\Documents and Settings\All Users\Application Data\Adobe\fs.cfg
%SystemDrive%\Documents and Settings\All Users\Application Data\Adobe\rxsupply.sys

For more info :

http://www.symantec.com/connect/blogs/b ... um=twitter

Thanks in advance,

KTX

[leeno]

Check the attach file

Hi!

Looking Backdoor.Proxybox sample, please find details below.

MD5: 86908d0c072ce28a7650b78bab5a06e5
File size: 21.0 KB ( 21504 bytes )

%SystemDrive%\Documents and Settings\All Users\Application Data\Adobe\sp.dll
%SystemDrive%\Documents and Settings\All Users\Application Data\Adobe\fs.cfg
%SystemDrive%\Documents and Settings\All Users\Application Data\Adobe\rxsupply.sys

For more info :

http://www.symantec.com/connect/blogs/b ... um=twitter

Thanks in advance,

KTX

[rkhunter]

FSD-filtering level rootkit http://www.symantec.com/connect/blogs/b ... em-hooking

[Xylitol]

In attach and >>161693
https://www.virustotal.com/file/06bf363 ... 344938199/
DrWeb BackDoor.Andromeda.22
BitDefender Gen:Variant.TDss.71
McAfee PWS-Zbot.gen.hv
AntiVir TR/Cridex.EB.23
av detection aww yeah

[rkhunter]

Yep, this is driver - 86908d0c072ce28a7650b78bab5a06e5.