NEW POTENTIALLY RISKWARE DETECTED: not-a-virus:PSWTool.Win32.Agent.wi from securityxploded.com (SX Password Remover Suite - PASSWORDSTEALER)

NEW POTENTIALLY RISKWARE DETECTED:
SX Password Remover Suite - PASSWORDSTEALER

not-a-virus:PSWTool.Win32.Agent.wi

http://securityxploded.com/download-file.php?id=1175

• https://www.virustotal.com/de/url/e16f4432398839be81b26f99bd1383feb414f05f5a2a87c7a44b76ac835b72b1/analysis/1397489175/

http://securityxploded.com/getfile_plus.php?id=1175

• https://www.virustotal.com/de/url/208ae819b9936e31aebe61a1f8109006c352819503e642d4dd7af3e28a554ca6/analysis/1397489192/

(SXPasswordRemoverSuite.zip) not-a-virus:PSWTool.Win32.Agent.wi

• https://www.virustotal.com/de/file/39122c76f0ed46174644d507eb28d40050d2954f49a0cb4cdceeb3b4be7aec10/analysis/1397488622/

(Setup_SXPasswordRemoverSuite.exe) not-a-virus:PSWTool.Win32.Agent.wi

• https://www.virustotal.com/de/file/b24cbff70b29b2da22dfb510fd446abcb302db15fdd373823d7aca59b58cabef/analysis/1397488631/

WEPAWET: SUSPICIOUS

• http://wepawet.iseclab.org/view.php?hash=7e7933fe50b94cc98b071cd4f3cf0c3d&t=1397488890&type=js

• http://zulu.zscaler.com/submission/show/e15f2d9e3452820d3e013e126d29424d-1397488901

IP:

http://64.150.191.172/

• https://www.virustotal.com/de/url/774ec0fe019369938cf734a511ae4334b74f31e5c0202710934e0997df8a6e7f/analysis/

BESIDES THAT, FOLLOWING SUSPICIOUS/MALICIOUS LINK HAS BEEN FOUND (HIDDEN IFRAMES):

http://securityphresh.com/index.html

• https://www.virustotal.com/de/url/560aa2ab68e0ab1713b590a4df8096afe6b7efcb072defb901c7d02446a75cd9/analysis/1397489696/

HIDDEN LINKS

HIDDEN IFRAMES TO:

http://2014.confidence.org.pl/

https://www.virustotal.com/de/url/c121b7f7adb198511ce3ff8be6daf221595296fa01e03a8d76fc0cf8f1894b97/analysis/1397491597/