VirusKorean
Attachments
pw = zoit
(4.97 MiB) Downloaded 61 times
(4.97 MiB) Downloaded 61 times
Я люблю старые времена.
A forum for reverse engineering, OS internals and malware analysis
SweeperLab
Attachments
pw = zoit
(1.44 MiB) Downloaded 20807 times
(1.44 MiB) Downloaded 20807 times
Я люблю старые времена.
Striker wrote:DataSaveThis looks like Kobayashi´s post at VX Heaven´s forum but without the analysis reports made with Buster Sandbox Analyzer.
Buster_BSA wrote:right. i took that screen from his postStriker wrote:DataSaveThis looks like Kobayashi´s post at VX Heaven´s forum but without the analysis reports made with Buster Sandbox Analyzer.
Я люблю старые времена.
hxxp://elementalbiller.com/modules/mod_wdbanners/blog.php?how128.jpg
redirects to:
hxxtp://helloworld1.ru/scanner/?param=128
VClean_Setup(1).exe
MD5 : bf1f968125ec8405a6c332699fbefa62
https://www.virustotal.com/file-scan/re ... 1323114233
redirects to:
hxxtp://helloworld1.ru/scanner/?param=128
VClean_Setup(1).exe
MD5 : bf1f968125ec8405a6c332699fbefa62
https://www.virustotal.com/file-scan/re ... 1323114233
Attachments
(202.21 KiB) Downloaded 64 times
markusg wrote:hxxp://elementalbiller.com/modules/mod_wdbanners/blog.php?how128.jpgInstaller for XP Antivirus 2012
redirects to:
hxxtp://helloworld1.ru/scanner/?param=128
VClean_Setup(1).exe
MD5 : bf1f968125ec8405a6c332699fbefa62
https://www.virustotal.com/file-scan/re ... 1323114233
braviax shit -> http://xylibox.blogspot.com/2011/12/braviax.html
Я люблю старые времена.
VClean_Setup.exe not working:
The procedure entry point I_CryptUIProtect could not be located in the dynamic link library VClean_Setup.exe :?: :?: :?:
hxxp://174.142.214.236/ only works with Chrome.
Info:
Administrator:
Name:(Tyson Larocque)
Email:() tel-- +1.6046454230
Fax:(+1.6046454230)
Tyson Larocque
2321 Robson St
Vancouver BC, CA V6B 3K9
The procedure entry point I_CryptUIProtect could not be located in the dynamic link library VClean_Setup.exe :?: :?: :?:
hxxp://174.142.214.236/ only works with Chrome.
Info:
Administrator:
Name:(Tyson Larocque)
Email:() tel-- +1.6046454230
Fax:(+1.6046454230)
Tyson Larocque
2321 Robson St
Vancouver BC, CA V6B 3K9
To help protect your computer, Windows Web Security have detected Trojans and ready to remove them.
xwxproductions wrote:VClean_Setup.exe not working:it works fine. try this one
The procedure entry point I_CryptUIProtect could not be located in the dynamic link library VClean_Setup.exe :?: :?: :?:
hxxp://174.142.214.236/ only works with Chrome.
Attachments
pw = zoit
(205.36 KiB) Downloaded 74 times
(205.36 KiB) Downloaded 74 times
Я люблю старые времена.
Striker wrote:Same error :(xwxproductions wrote:VClean_Setup.exe not working:it works fine. try this one
The procedure entry point I_CryptUIProtect could not be located in the dynamic link library VClean_Setup.exe :?: :?: :?:
hxxp://174.142.214.236/ only works with Chrome.
Maybe it's the OS I'm using. (Windows Developers Preview)
To help protect your computer, Windows Web Security have detected Trojans and ready to remove them.
