Wednesday, April 9, 2008

Zlob Trojan Distributing sites

Zlob Trojan Distributing sites


Site Name: Swfinstrument.com
IP Address: 85.255.120.109

Site Name: Flwsolution.com
IP Address: 85.255.118.180

As usual the site registrants for both the sites are ESTDOMAINS, INC. The installers from these sites were scanned and here are the results:

VirusTotal Scan Result: 9/32 (28.13%)

AntiVir 7.6.0.81 2008.04.08 TR/Zlob.iyh
Authentium 4.93.8 2008.04.09 W32/Downldr2.BMKO
eSafe 7.0.15.0 2008.04.01 suspicious Trojan/Worm
F-Prot 4.4.2.54 2008.04.08 W32/Downldr2.BMKO
Microsoft 1.3408 2008.04.06 TrojanDownloader:Win32/Zlob.gen!AW
Prevx1 V2 2008.04.09 Generic.Malware
VBA32 3.12.6.4 2008.04.06 suspected of Downloader.Zlob.3
VirusBuster 4.3.26:9 2008.04.08 Trojan.DL.Zlob.Gen.47
Webwasher-Gateway 6.6.2 2008.04.08 Trojan.Zlob.iyh

Stay away from these sites.

Bharath M N

blog comments powered by Disqus