Thread maintenance #11473 by EP_X0FF Tue Feb 07, 2012 5:30 am markusg posts and samples merged. Ring0 - the source of inspiration Username EP_X0FF Rank Global Moderator Posts 4947 Joined Sun Mar 07, 2010 5:35 am Location Russian Federation Contact
Re: Trojan Ransom / FakePoliceAlert #11480 by markusg Tue Feb 07, 2012 11:30 am SHA256: 7612a927ac39b58c1ce8106e9fbbc611daa797fa5ef27f4285df4dba09b22ca1 File name: 0.8362117519703143.exe https://www.virustotal.com/file/7612a92 ... 328613603/ Attachments 0.8362117519703143.rar (180.95 KiB) Downloaded 66 times Username markusg Posts 737 Joined Mon Mar 15, 2010 2:53 pm
Re: Trojan Ransom / FakePoliceAlert #11490 by markusg Tue Feb 07, 2012 7:31 pm SHA256: 963931b475ead8ba2884b962a1aae53463d6ce46750109d8c51eadb65c6f541d File name: firefox.exe https://www.virustotal.com/file/963931b ... 328642986/ Attachments firefox.rar (50.06 KiB) Downloaded 54 times Username markusg Posts 737 Joined Mon Mar 15, 2010 2:53 pm
Re: Trojan Ransom / FakePoliceAlert #11507 by markusg Wed Feb 08, 2012 1:24 pm SHA256: a838b6e56491be38377cc0732e91a962f41f624dae0c809ac5f9e750c7f3ec06 File name: firefox.exe https://www.virustotal.com/file/a838b6e ... 328706452/ Attachments Firefox.rar (54.54 KiB) Downloaded 55 times Username markusg Posts 737 Joined Mon Mar 15, 2010 2:53 pm
Re: Trojan Ransom / FakePoliceAlert #11509 by markusg Wed Feb 08, 2012 3:41 pm SHA256: c66427469ff7bcf3253d171ea67d0569a88055e49626c9b2e5a45c4b92a81fbb File name: firefox.exe https://www.virustotal.com/file/c664274 ... 328714971/ SHA256: feada9b82a4a643a0d774138ec8c854c8c9708e9ee1a87fd49a35b2a7f20bd11 File name: firefox.exe https://www.virustotal.com/file/feada9b ... 328715136/ Attachments Firefox1.rar (107.03 KiB) Downloaded 59 times Username markusg Posts 737 Joined Mon Mar 15, 2010 2:53 pm
Re: Trojan Ransom / FakePoliceAlert #11511 by markusg Wed Feb 08, 2012 5:56 pm SHA256: 08ae7eebbac83183fb62d3cf3c3309ce07727baa74c8cdef7df175702239c43a File name: 0.7285036803230004.exe https://www.virustotal.com/file/08ae7ee ... 328721896/ SHA256: 4d30b180df4a318ab526567db1edcb760e77b96a0e81dfe514f22c2c9b388f72 File name: firefox.exe https://www.virustotal.com/file/4d30b18 ... 328722031/ SHA256: c576e32fdcc09659478a7d28b233fca522d736858e4246b130fa2024df36e82d File name: InetAccelerator.exe https://www.virustotal.com/file/c576e32 ... 328722171/ Attachments MovedFiles.rar (380.31 KiB) Downloaded 61 times Username markusg Posts 737 Joined Mon Mar 15, 2010 2:53 pm
Re: Trojan Winlock / Ransom / ScreenLocker #11600 by rkhunter Mon Feb 13, 2012 11:14 am Ransomware - Malagent Attachments C9A327C394C048834898418E3CCB2861.zip pass:infected (42.25 KiB) Downloaded 55 times B74A1E87A8B58642270E5BAF71C53ADA.zip pass:infected (43.18 KiB) Downloaded 58 times Username rkhunter Posts 1156 Joined Mon Mar 15, 2010 12:51 pm Location Russian Federation Contact
Re: Trojan Ransom / FakePoliceAlert #11605 by markusg Mon Feb 13, 2012 3:32 pm SHA256: 5af27ff45673512fcf007af732b06d2002caa20b5235aa6d4461c450af65a165 File name: saletoc.exe https://www.virustotal.com/file/5af27ff ... 329146866/ Attachments saletoc.rar (87.99 KiB) Downloaded 58 times Username markusg Posts 737 Joined Mon Mar 15, 2010 2:53 pm
Re: Trojan Ransom / FakePoliceAlert #11611 by markusg Mon Feb 13, 2012 6:59 pm SHA256: 960c3de1bdb4754f63f5a99033531d1841a3fef32dae84c885592b481a0e9bff File name: firefox.exe https://www.virustotal.com/file/960c3de ... 329159055/ SHA256: c8a098e444e4ea5c611c4f5fcf6e67b2a1419017903fb0c06768346b1e3c7384 File name: 0.19672433745951778.exe https://www.virustotal.com/file/c8a098e ... 329159167/ SHA256: d940c082812a39b47741a25e85aeab012f14d0ce252988cfe08e4c801d0bc690 File name: saletoc.exe https://www.virustotal.com/file/d940c08 ... 329159399/ Attachments ransom.rar (329.02 KiB) Downloaded 64 times Username markusg Posts 737 Joined Mon Mar 15, 2010 2:53 pm
Re: Trojan Winlock / Ransom / ScreenLocker #11622 by rkhunter Tue Feb 14, 2012 4:05 pm :) http://blogs.technet.com/b/mmpc/archive ... olice.aspx Username rkhunter Posts 1156 Joined Mon Mar 15, 2010 12:51 pm Location Russian Federation Contact