[Xylitol]

Security Shield rogue, full undetected: https://www.virustotal.com/file-scan/re ... 1295541138

[EP_X0FF]

Security Shield rogue, full undetected: https://www.virustotal.com/file-scan/re ... 1295541138

No surprise :) These guys has very good cryptor support. And it's server side, same sample downloaded few minutes after yours, the same but different :)

http://www.virustotal.com/file-scan/rep ... 1295542056

[markusg]

are there no urls for the last 2 or have i missed

[EP_X0FF]

are there no urls for the last 2 or have i missed :-)

hxxp://satel12vc.co.cc/inst.exe :)

here we go with generic's

http://www.virustotal.com/file-scan/rep ... 1295548000

[gigaz]

Palladium Pro

VirusTotal Results:
http://www.virustotal.com/file-scan/rep ... 1295642152


Starts during the windows boot process, modifies registry to start on safe mode, does not allow to show the desktop and run apps.



Main UI

[redcodefinal]

i dont like guys who request something when he have only one post.

seem he have anti-vm but i'm lazy to find them...
why do you need it?

I'm looking to infect a billion computers with it BWHAHAHAHA! No, I am looking for it for research. I've been studying computer security for 2 years and have taken a course called Offensive Security -> (http://www.offensive-security.com/). Also run my own Youtube security channel in case your interested-> (http://www.youtube.com/user/redcodefinal). I wanted to A:See what it installs, where it installs it, reg keys it uses etc. (I know I can find this on the internet but, I like to do things myself) and then I want to fuzz the application to see if I can create a usable buffer overflow. I was really hoping to make my own solution as a learning tool. Also sorry @EP_X0FF, I'm new and kind of suck, please forgive me ;_;.

-Ian

[Xylitol]

Spyware Protection

drop Spyware Protection
serial: SL55J-T54YHJ61-YHG88



http://www.virustotal.com/file-scan/rep ... 1295894768

[Xylitol]

fake defrager: windows scan

Code: Select all

Thank you for your purchase, Windows Scan!
Your activation code: 0973467457475070215340537432225
EDS URL: http://edsfull.com/customers/dl/Defrag.exe
Contact us through Help&Support section in the Windows Scan menu or by phone +1-877 282 0139

drop files in %appdata%

http://www.virustotal.com/file-scan/rep ... 1295948222

[Xylitol]

Neovaccine

http://www.virustotal.com/file-scan/rep ... 1295993200

[Xylitol]

Safecare

http://www.virustotal.com/file-scan/rep ... 1296069753