Blackdog Report post Posted February 22, 2007 Not detected by SAS, please add it: hXXp://seriall.com/download/windows_keygen.exe Share this post Link to post Share on other sites
Windsor Report post Posted February 22, 2007 Hi Blackdog, Can you please send the file in a password protected zip to: samples (AT) superantispyware (DOT) com Don't forget to send the password with the email. Best regards, Windsor Share this post Link to post Share on other sites
fatdcuk Report post Posted February 22, 2007 BlackDog Virtually a high percentage of keygens and crackz now adays are malware droppers whether CWS(many flavours),Lop C2 or Z-lob's. It is a crazy amount of files to which you will find no one product even covers a high percentage of them since some are polymorhs meaning each downloaded dropper will have a unique MD5 making it a new *file* when collected from the website servers. IMO the important thing is whether SAS knows the payload when/as or after it has been deployed. FWIW Cracksite,keygen and serials websites are my best source of malware bots alongside p2p networks(searching for known bad malware and then grepping OP's harddrive for new freinds;) ). Please can you kill the link in your post because you don't want any less experience user's going there to become yet more victim's Share this post Link to post Share on other sites
SUPERAntiSpy Report post Posted February 22, 2007 I'll take a look today - those sites are regular harvest grounds for new malware and they produce new packages almost daily. Share this post Link to post Share on other sites
