Skip navigation.
Home

Conflicker_Autorun_File

|

Hi today in my Forum ( Security an Viruses )i've received a Sample of Confliker ( it's an Auto-run File ) .

Link(1): Directly from my Forum ( Sorry but the Forum is in Arabic ) :

http://www.mohfa.net/forums/index.php?showtopic=42&pid=81&mode=threaded&start=#entry81

link(2) : http://www.easy-share.com/1904099344/Confliker.rar

PWD : virus

Regrads , Randy

Conficker Extra

Hi Randy

Theres in your sample D/L only a .inf filled with various characters such as a few i'll show here.

;fb 
;رأoبقµدKkA¢PaںأTھx¹uerثf‌J•ojP½مFf¹wu¨iہgH…bêmKھZHyFL
[   TdkjJufXACQXwTrqdYPpjbSC]

;Kf’Z  
;  اگِأerھK¯D¥ّoJUqHK­¦emTiv×N¹q÷CڈIogه×f،cىD¾قcح 
ajzLmMmVuIndpuy =lcH
 QPDdnsHCDPoyNqFrWqCPwdLwE =  EYhdLWGyLTaLO  

KQKpTKLgSQvADhzMNrhSy=  VZqYYrMDNyVUqfoNwyaUdSitL

;YBQ¯HSںoآbOؤ‍‌bèErwu£ïmœhHk¤âFyْ€b™®ièdغZorf´Nv•ئ
;XآعOq¥ج÷ءجk‡زضأàMSv‚­qhأHh
XQQT=KXpdSzJH 
; XVkPّEًAƒïoظzْl¨GOغ¥boeS,

Are we to understand that these will eventually form the malnamed dll that always accompanies Conficker exploit or could you please explain a little more for us.

Thanks EASTER

Conficker.c

Randy,

I browsed you forum, did a bit of translating (google) and found this post.
Would you provide a link for the conficker.c sample.

Conficker_Variants خيارات Options أخبرني بجديد هذا الموضوع
إرسال الموضوع لصديق
طباعة الموضوع
تنزيل / طباعة هذا الموضوع
الإشتراك في هذا المنتدى
طريقة العرض
تحويل للنمط : ملخص
عادي
تحويل للنمط : تدريجي

mohfa Mohfa

عرض ملف العضو View file member Mar 21 2009, 07:37 PM Mar 21 2009, 07:37 PM مشاركة #1 Participation # 1

Administrator Administrator

المجموعة: إدارة عامة Group: public administration
المشاركات: 48 Posts: 48
التسجيل: 18-February 09 Registration: 18-February 09
رقم العضوية: 1 Membership No.: 1

jwgkvsq.zip ( 156.03كيلوا بايت ) عدد مرات التحميل: 9 Jwgkvsq.zip (156.03 Kilwa bytes) No. of downloads: 9

jwgkvsq_.zip ( 152.54كيلوا بايت ) عدد مرات التحميل: 9 Jwgkvsq_.zip (152.54 Kilwa bytes) No. of downloads: 9

FK.zip ( 162.47كيلوا بايت ) عدد مرات التحميل: 9 FK.zip (162.47 Kilwa bytes) No. of downloads: 9

Conficker_C.zip ( 180.25كيلوا بايت ) عدد مرات التحميل: 8 Conficker_C.zip (180.25 Kilwa bytes) No. of downloads: 8

v3conficker.zip ( 102.55كيلوا بايت ) عدد مرات التحميل: 9 V3conficker.zip (102.55 Kilwa bytes) No. of downloads: 9

xciwtw.zip ( 154.84كيلوا بايت ) عدد مرات التحميل: 10 Xciwtw.zip (154.84 Kilwa bytes) No. of downloads: 10

thanks

Nice Forum

RANDY HI

Very Nice Research Forum Indeed!!!

I had no issues browsing and in fact the Unique to most of us Arabian Writing Progression is a new refreshing positions that the world is used to. I hope you many happy returns of positive results and keep up the great work there and post here as you feel useful for the OC Community and Welcome!

Was able to pull in all variants so i will definitely be turning these inside out on my own research room & machines and follow the progressions and if lucky maybe rate them as to their stealth ability as well as if my security fence is up to task in meeting these code challenges.

Regards Easter

Randy, I joined, Great

Randy,

I joined, Great forum! Albeit a bit hard to translate, but definitely worth it.

Regards