Jump to content

ProxyBlocker.zip


schyzosoft

Recommended Posts

ProxyBlocker.zip

VT 1/41 https://www.virustotal.com/analisis/40a9fbe...5ba1-1274432091

Attached File(s)

Attached File ProxyBlocker.zip ( 1.11MB ) Number of downloads: 24

Attached File LINKS.rar ( 124bytes ) Number of downloads: 2

Hi, I'm arief from schyzosoft, I'm the one who make proxyblocker beta.

Just wana inform, the file is not contain any malware, it just packed by UPX compressor. I'm sure that is juts false alarm of your AV.

Regards,

Arief

Link to post
Share on other sites

  • 2 weeks later...
  • 2 months later...

This file?

File name: ProxyBlocker.exe

Result: 30/ 41 (73.2%)

AhnLab-V3 2010.08.25.00 2010.08.24 Dropper/Agent.2006339

AntiVir 8.2.4.38 2010.08.24 TR/Drop.Agent.bmzm

Antiy-AVL 2.0.3.7 2010.08.23 Trojan/Win32.Agent.gen

Authentium 5.2.0.5 2010.08.24 W32/MalwareF.SFS

Avast 4.8.1351.0 2010.08.24 Win32:Malware-gen

Avast5 5.0.594.0 2010.08.24 Win32:Malware-gen

CAT-QuickHeal 11.00 2010.08.24 TrojanDropper.Agent.bmzm

Comodo 5848 2010.08.24 TrojWare.Win32.TrojanDropper.Agent.bmzm

eSafe 7.0.17.0 2010.08.24 Win32.TRDrop.Agent.B

F-Prot 4.6.1.107 2010.08.24 W32/MalwareF.SFS

GData 21 2010.08.24 Win32:Malware-gen

Ikarus T3.1.1.88.0 2010.08.24 Trojan-Dropper.Agent

Jiangmin 13.0.900 2010.08.23 TrojanDropper.Agent.anre

Kaspersky 7.0.0.125 2010.08.25 Trojan-Dropper.Win32.Agent.bmzm

McAfee 5.400.0.1158 2010.08.25 Artemis!1027068E03A3

McAfee-GW-Edition 2010.1B 2010.08.24 Artemis!1027068E03A3

NOD32 5394 2010.08.24 probably a variant of Win32/TrojanDropper.Agent.BNKWXEF

Norman 6.05.11 2010.08.24 Suspicious_Gen2.ATIKR

nProtect 2010-08-24.01 2010.08.24 Trojan-Dropper/W32.Agent_Packed.2006339

Panda 10.0.2.7 2010.08.25 Trj/CI.A

PCTools 7.0.3.5 2010.08.25 Trojan.ADH

Rising 22.62.01.04 2010.08.24 Trojan.Win32.Generic.5205C53C

Sophos 4.56.0 2010.08.25 Mal/Generic-A

Sunbelt 6787 2010.08.25 Trojan-Dropper.Win32.Agent

Symantec 20101.1.1.7 2010.08.25 Trojan.ADH

TheHacker 6.5.2.1.355 2010.08.24 Trojan/Dropper.Agent.bmzm

TrendMicro 9.120.0.1004 2010.08.24 TROJ_GEN.R23C3GE

TrendMicro-HouseCall 9.120.0.1004 2010.08.25 TROJ_GEN.R23C3GE

VBA32 3.12.14.0 2010.08.24 Trojan-Dropper.Win32.Agent.bmzm

ViRobot 2010.8.24.4005 2010.08.24 Dropper.S.Agent.2006339

MD5 : 1027068e03a3a9c8329b51770760fe58

We will check this out to see if this is a FP but it is not looking good at this point.

Link to post
Share on other sites

  • 1 month later...
This file?

File name: ProxyBlocker.exe

Result: 30/ 41 (73.2%)

AhnLab-V3 2010.08.25.00 2010.08.24 Dropper/Agent.2006339

AntiVir 8.2.4.38 2010.08.24 TR/Drop.Agent.bmzm

Antiy-AVL 2.0.3.7 2010.08.23 Trojan/Win32.Agent.gen

Authentium 5.2.0.5 2010.08.24 W32/MalwareF.SFS

Avast 4.8.1351.0 2010.08.24 Win32:Malware-gen

Avast5 5.0.594.0 2010.08.24 Win32:Malware-gen

CAT-QuickHeal 11.00 2010.08.24 TrojanDropper.Agent.bmzm

Comodo 5848 2010.08.24 TrojWare.Win32.TrojanDropper.Agent.bmzm

eSafe 7.0.17.0 2010.08.24 Win32.TRDrop.Agent.B

F-Prot 4.6.1.107 2010.08.24 W32/MalwareF.SFS

GData 21 2010.08.24 Win32:Malware-gen

Ikarus T3.1.1.88.0 2010.08.24 Trojan-Dropper.Agent

Jiangmin 13.0.900 2010.08.23 TrojanDropper.Agent.anre

Kaspersky 7.0.0.125 2010.08.25 Trojan-Dropper.Win32.Agent.bmzm

McAfee 5.400.0.1158 2010.08.25 Artemis!1027068E03A3

McAfee-GW-Edition 2010.1B 2010.08.24 Artemis!1027068E03A3

NOD32 5394 2010.08.24 probably a variant of Win32/TrojanDropper.Agent.BNKWXEF

Norman 6.05.11 2010.08.24 Suspicious_Gen2.ATIKR

nProtect 2010-08-24.01 2010.08.24 Trojan-Dropper/W32.Agent_Packed.2006339

Panda 10.0.2.7 2010.08.25 Trj/CI.A

PCTools 7.0.3.5 2010.08.25 Trojan.ADH

Rising 22.62.01.04 2010.08.24 Trojan.Win32.Generic.5205C53C

Sophos 4.56.0 2010.08.25 Mal/Generic-A

Sunbelt 6787 2010.08.25 Trojan-Dropper.Win32.Agent

Symantec 20101.1.1.7 2010.08.25 Trojan.ADH

TheHacker 6.5.2.1.355 2010.08.24 Trojan/Dropper.Agent.bmzm

TrendMicro 9.120.0.1004 2010.08.24 TROJ_GEN.R23C3GE

TrendMicro-HouseCall 9.120.0.1004 2010.08.25 TROJ_GEN.R23C3GE

VBA32 3.12.14.0 2010.08.24 Trojan-Dropper.Win32.Agent.bmzm

ViRobot 2010.8.24.4005 2010.08.24 Dropper.S.Agent.2006339

MD5 : 1027068e03a3a9c8329b51770760fe58

We will check this out to see if this is a FP but it is not looking good at this point.

Wow, thanks for the research checking the file.

Finally I found the problem, PE Header problem which is caused by custom packer with scramble..

I apologize for this mess...

Regards,

Arief

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.