[onthar]

Files unavailable =(

[dcmorton]

Files unavailable =(

Megauploads work fine for me. Mirrored at personal site as well.

http://networkwhisperer.com/malware/Cidox.part1.rar
http://networkwhisperer.com/malware/Cidox.part2.rar
http://networkwhisperer.com/malware/Cidox.part3.rar
http://networkwhisperer.com/malware/Cidox.part4.rar

[EP_X0FF]

12048 unique droppers 1.03 GB, last one pack for 2011. Enjoy, pass malware.

200 mb, 1
http://www.megaupload.com/?d=H0WM1BNO

200 mb, 2
http://www.megaupload.com/?d=GCLEKX73

200 mb, 3
http://www.megaupload.com/?d=TYEE91I9

200 mb, 4
http://www.megaupload.com/?d=NU6RDVD2

9 mb, 5
http://www.megaupload.com/?d=J8VNXQ66

[Xylitol]

http://inload.biz/?link=jnXedghbnoe30csaa9

malwox link to authorization.

[Aleksandra]

Updated _http://hit4you.ru/img/nuretafiles/user_497.exe

MD5: 63d630b4ce3b1118d221046cf4f66a93
SHA1: b47e8e207e3b65a80644d62562a5ee66cffeda0f
https://www.virustotal.com/file/77d9323 ... /analysis/

[Win32:Virut]

MD5: FACED14F6D3399C2B8092441A4B6FCF7
SHA1: 24BBD6E51AC290AD349D14E33F778650520A9AAD
https://www.virustotal.com/file/1e7f792 ... /analysis/

[Win32:Virut]

I'm not sure that this is Cidox.

3 samples attached.

[EP_X0FF]

I'm not sure that this is Cidox.

3 samples attached.

Yes it is Cidox. Removal same - from AppInit_Dlls + cleanup of system32 folder.

[Xylitol]

https://www.virustotal.com/file/013aa2c ... 358244951/

i will try to get a fresh sample later.

[Xylitol]

Fresh from today.
https://www.virustotal.com/file/cbbc434 ... 358288483/