Subject: Re: [boost] Warning. Possible virus at vault (thread_lokeable)
From: Niels Dekker - address until 2010-10-10 (niels_address_until_2010-10-10_at_[hidden])
Date: 2009-06-27 05:35:40
Agustín K-ballo Bergé wrote:
> The recently uploaded 'thread_lokeable' file at the vault contains an
> executable that appears to be a virus. virustotal.com reports 6/41 hits.
> The name of the owner (marc0x) appears at some hacker related forums.
> I don't know what should be done in such cases, so I hope some
> administrator would read this message and take a look at the file.
I don't know what to do either, but I've just mailed your finding to
Info (at) boostpro.com
FYI, I've just downloaded the file, thread_lokeable.zip, and AVG
reported to me that the executable it contains (thread_lokeable.exe) is
a "Trojan horse Dropper.VB.CFQ"
Kind regards, Niels
-- Niels Dekker http://www.xs4all.nl/~nd/dekkerware Scientific programmer at LKEB, Leiden University Medical Center
Boost list run by bdawes at acm.org, gregod at cs.rpi.edu, cpdaniel at pacbell.net, john at johnmaddock.co.uk