I have just analyzed new sample of CW4 (a9230c5a78b19647e812842d1f45b846) it seems that they
return to the older information image, however without details concerning version. At least 6 CW proxies still works.
I can sharing those host files if anyone need it.
Could you send it directly to the malwr or reverse.it and place here md5/sha?
Sorry, you don't have permission for that!
I can't send you PM atm
My PM blocked now.
I'm Sorry for that.
Edited by crisis2k, 23 November 2015 - 11:05 PM.