News
Contributed by: Aurelija
Date: July 2, 2009
The problem with this malicious file is that it has a very low antivirus detection rate. According to the information provided by VirusTotal - an online service providing free malware scanning for individual files - only two of 32 anti-virus engines identified the threat. The malicious file, having the size of 22528 bytes and MD5: 24bd24f8673e3985fc82edb00b24ba73, is known to be a Trojan Downloader and is identified by the two antivirus programs as Trojan.Botnetlog.11 or simply as a Suspicious File. When downloaded, it connects to a Bot C&C server with the IP 78.109.29.116. Finally, after connecting to the mentioned IP, a Rootkit installer is downloaded on victims' machines from the same IP. So stay extremely alert each time you enter your browser and start surfing the net. You can never know where cyber criminals are waiting for you with a well prepared payload of viruses, Trojans, worms and other malware. Spammers and other cyber-criminals are becoming more and more creative in their malicious schemes. We, simple users, need to be very careful and do our best to secure our computers if we don't want these criminals to gain benefits from their malicious activities. |
|||||
Software Downloads

Searching for a torrent? And maybe you would also like to get acquainted with some malicious code? In that case I'd definitely recommend you get in contact with Torrentreactor - regarded as one of the biggest and most reliable torrent search engines on the web. Security experts from Websense Security Labs have recently found that cyber criminals managed to compromise this website and are now using it to spread a whole bunch of exploits to users browsing the site.
This time hackers managed to inject an IFrame into the Torrentreactor website. Because of this injected IFrame Torrentreactor, visitors are being led to a specific site with exploits. These exploits affect a whole list of vulnerable applications, such as Adobe's Reader, Adobe Shockwave, Microsoft's Internet Explorer and Office Snapshot Viewer. If the browser is successfully exploited, a malicious file is downloaded and run from the exploit site.
User Comments