ACAD/Medre.A

360Tencent

http://blog.eset.com/2012/06/21/ ... ndustrial-espionage

http://blog.eset.com/2012/06/21/acadmedre-a-technical-analysis-2

ACAD/Medre.A is a serious example of suspected industrial espionage. Every new design created by a victim is sent automatically to the authors of this malware. Needless to say this can cost the legitimate owner of the intellectual property a lot of money as the cybercriminals will have designs before they even go into production by the original designer. The attacker may even go so far as to get patents on the product before the inventor has registered it at the pate

By working with Autodesk, Tencent and CVERC, we were able to not only alert and inform users but also defeat the e-mail relay system used by the attackers and deny them access to the e-mail boxes, so the damage is now contained.

.

腾讯亮了一回



清除工具

http://download.eset.com/special/EACADMedreCleaner.exe

Xylitol 提供

sxyuqiao

要通过TX宣传？

蝉鸣时

Tencent LIGHTED.

追影子的十三

FS干掉一个

saga3721

File ID         Filename         Size (Byte)        Result
26953527         New Folder.rar        20.33 KB        OK
A listing of files contained inside archives alongside their results can be found below:
File ID         Filename         Size (Byte)        Result
26953528         e8e1148f7497aa546e46...9b         12.04 KB         UNDER ANALYSIS
26953529         2dda8e76f8488e8cd44d...0e         21.59 KB         UNDER ANALYSIS
26953530         7c489147ce4238ba0f9f...c9         21.54 KB         UNDER ANALYSIS
26953531         b886a58c6be03d75bf0a...32         22.07 KB         UNDER ANALYSIS

846859163

密码是多少啊

5332666

to eset

蝉鸣时

5332666 发表于 2012-6-22 12:46
to eset

ESET已经可以全部查杀了...而且都推出专杀工具了...

sungan01

846859163 发表于 2012-6-22 12:44
密码是多少啊

infected



。。。。。。。。

5332666

蝉鸣时 发表于 2012-6-22 12:57
ESET已经可以全部查杀了...而且都推出专杀工具了...

上班这里的电脑没装ESET，所以不知道ESET能不能查杀，顺手就发了邮件过去了。