Results 1 to 2 of 2

Thread: Malware detected by jsunpack on-line: bopmtt.pdf

  1. #1
    Junior Member
    Join Date
    Aug 2010
    Posts
    2

    Exclamation Malware detected by jsunpack on-line: bopmtt.pdf

    Took a while, but finally tracked down a reason for a strange pdf "bopmtt":

    After multiple submissions to various online sites, it came up at JSUNPACK
    A Generic JavaScript Unpacker (results in link):

    http://jsunpack.jeek.org/dec/go?report=a856f575e9648aa26cb8cad8d3057f96d6844784

    Was wondering if it, or it's ramifications could be dealt with/added in Spybot?

    Pdf contains babble- similar to another pdf "mgvfo.pdf": 'nimbler boats must pass... Cord dismissd, that dim . Ruin ye stand, or on attila, who
    enter here. Power, no proud scorn, and source."

    etc etc

    Not computer literate, so if this is old news, dutifully ignore.

    Thanks.
    Last edited by J_____; 2010-08-09 at 03:34. Reason: clarity

  2. #2
    Junior Member
    Join Date
    Aug 2010
    Posts
    2

    Default Malware.

    Ok. Fine.

    These documents possibly from Latvia are popping up everywhere- the pdfs seem to be a bad google translation of Dantes Inferno...

    They are exploit kits. Spybot has no idea about them.

    Jsunpack report on ccdfr.com/kh/ptnr/zsmsmy.pdf:

    http://jsunpack.jeek.org/dec/go?repo...956f8a766c4a2e


    Malware URL report on IP address:

    http://www.malwareurl.com/listing.ph...=85.234.190.56


    Ignore them at your own risk, people!

    Ip: 85.234.190.56

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •