[nsp-sec] Koobface infected machines - 653 ips

[Carles Fragoso]

I have feedback regarding this incident from of the infected customers. Infected files found are:

Trojan:Win32/Koobface.gen!J:
    www\sys\v2captcha21.exe.cache
    www\sys\systest.donot.delete.exe.cache
    www\.sys\systest.donot.delete.exe.cache
VirTool:Win32/VBInject.gen!DG:
    www\sys\go.exe.cache
    www\sys\cmd.exe.cache
    www\mgbjz0\cmd.exe.cache
Worm:Win32/Koobface.gen!D
    www\sys\pp.14.exe.cache
    www\mgbjz0\pp.14.exe.cache

Regards,

-- Carlos

________________________________________
De: nsp-security-bounces at puck.nether.net [nsp-security-bounces at puck.nether.net] En nom de Anders Hardangen [anders at nsm.stat.no]
Enviat el: dilluns, 9 / novembre / 2009 20:01
Per a: nsp-security at puck.nether.net
Tema: [nsp-sec] Koobface infected machines - 653 ips

----------- nsp-security Confidential --------