又见MSN病毒

显示全部楼层 · 发表于 2007-7-30 16:53:48

msn病毒，新鲜的

xxx.rar包含多个在%userprofile%目录下随机六位字母.exe
[MD5: AB98AF 5070F7 0FC4F7 CE2F97 6A438A F98682 F639CC DA6766 5FCE61 424A21 E9EADA 99BA6F EC80DE 350A0A 12BE4F B1A519]

[ 本帖最后由 promised 于 2007-7-30 20:30 编辑 ]

显示全部楼层 · 发表于 2007-7-30 16:54:22

看看

显示全部楼层 · 发表于 2007-7-30 16:56:47

Found a virus or unwanted program 'PHISH/Bankfraud' [phishing]
in file 'E:\xxx.rar'.
Action taken:

显示全部楼层 · 发表于 2007-7-30 16:56:59

显示全部楼层 · 发表于 2007-7-30 16:58:39

不会吧！！！江民竟然一个都没有报！！！！

显示全部楼层 · 发表于 2007-7-30 16:58:58

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=106922 is infected with Backdoor.Win32.IRCBot.acd virus

显示全部楼层 · 发表于 2007-7-30 17:01:21

Starting the file scan:

Begin scan in 'C:\Documents and Settings\LV\桌面\病毒样本\libcintles3.rar'
C:\Documents and Settings\LV\桌面\病毒样本\libcintles3.rar
  [0] Archive type: RAR
  --> libcintles3.dll
   [DETECTION] Contains signature of the worm WORM/IRCBot.26000.1
   [INFO]    The file was deleted!

Starting the file scan:

Begin scan in 'C:\Documents and Settings\LV\桌面\病毒样本\xxx.rar'
C:\Documents and Settings\LV\桌面\病毒样本\xxx.rar
  [0] Archive type: RAR
  --> aamaij.exe
   [DETECTION] Contains signature of the Phish-File/Email PHISH/Bankfraud
  --> thtybp.exe
   [DETECTION] Contains signature of the Phish-File/Email PHISH/Bankfraud
  --> isgekl.exe
   [DETECTION] Contains signature of the Phish-File/Email PHISH/Bankfraud
  --> znoxkr.exe
   [DETECTION] Contains signature of the Phish-File/Email PHISH/Bankfraud
  --> tdmcbz.exe
   [DETECTION] Contains signature of the Phish-File/Email PHISH/Bankfraud
  --> chjahc.exe
   [DETECTION] Contains signature of the Phish-File/Email PHISH/Bankfraud
  --> xbhldl.exe
   [DETECTION] Contains signature of the Phish-File/Email PHISH/Bankfraud
  --> rivrsi.exe
   [DETECTION] Contains signature of the Phish-File/Email PHISH/Bankfraud
  --> ljvytz.exe
   [DETECTION] Contains signature of the Phish-File/Email PHISH/Bankfraud
  --> rsgvaf.exe
   [DETECTION] Contains signature of the Phish-File/Email PHISH/Bankfraud
  --> kejnwx.exe
   [DETECTION] Contains signature of the Phish-File/Email PHISH/Bankfraud
  --> htzkyp.exe
   [DETECTION] Contains signature of the Phish-File/Email PHISH/Bankfraud
  --> qcepdi.exe
   [DETECTION] Contains signature of the Phish-File/Email PHISH/Bankfraud
  --> itmgld.exe
   [DETECTION] Contains signature of the Phish-File/Email PHISH/Bankfraud
  --> mxqabj.exe
   [DETECTION] Contains signature of the Phish-File/Email PHISH/Bankfraud
   [INFO]    The file was deleted!

第一包怎么这么多。。。。

[ 本帖最后由 Kav6.0 于 2007-7-30 17:02 编辑 ]

显示全部楼层 · 发表于 2007-7-30 17:16:51

卡吧报第二个一不报

显示全部楼层 · 发表于 2007-7-30 17:17:41

第一个小红伞杀卡巴不认，第二个卡巴杀小红伞不认

显示全部楼层 · 发表于 2007-7-30 17:19:21

libcintles3.rar
AhnLab-V3 2007.7.28.0 2007.07.30 -
AntiVir 7.4.0.50 2007.07.30 Worm/IRCBot.26000.1
Authentium 4.93.8 2007.07.27 -
Avast 4.7.997.0 2007.07.30 -
AVG 7.5.0.476 2007.07.30 -
BitDefender 7.2 2007.07.30 Backdoor.IRCBot.IS
CAT-QuickHeal 9.00 2007.07.28 -
ClamAV 0.91 2007.07.30 Trojan.IRCBot-1088
DrWeb 4.33 2007.07.30 BackDoor.IRC.Sdbot.1703
eSafe 7.0.15.0 2007.07.29 -
eTrust-Vet 31.1.5016 2007.07.30 -
Ewido 4.0 2007.07.29 -
FileAdvisor 1 2007.07.30 -
Fortinet 2.91.0.0 2007.07.30 -
F-Prot 4.3.2.48 2007.07.27 -
F-Secure 6.70.13030.0 2007.07.30 Backdoor.Win32.IRCBot.acd
Ikarus T3.1.1.8 2007.07.30 Backdoor.Win32.IRCBot.acd
Kaspersky 4.0.2.24 2007.07.30 Backdoor.Win32.IRCBot.acd
McAfee 5085 2007.07.27 -
Microsoft 1.2704 2007.07.30 -
NOD32v2 2428 2007.07.30 a variant of Win32/IRCBot.WO
Norman 5.80.02 2007.07.27 -
Panda 9.0.0.4 2007.07.29 Suspicious file
Rising 19.34.01.00 2007.07.30 -
Prevx1 V2 2007.07.30 Backdoor.IRCBot.gen
Sophos 4.19.0 2007.07.26 -
Sunbelt 2.2.907.0 2007.07.28 -
Symantec 10 2007.07.30 W32.Mubla.B
TheHacker 6.1.7.158 2007.07.30 -
VBA32 3.12.2.1 2007.07.30 -
VirusBuster 4.3.26:9 2007.07.29 -
Webwasher-Gateway 6.0.1 2007.07.30 Worm.IRCBot.26000.1
xxx.rar
AhnLab-V3 2007.7.28.0 2007.07.30 -
AntiVir 7.4.0.50 2007.07.30 PHISH/Bankfraud
Authentium 4.93.8 2007.07.27 -
Avast 4.7.997.0 2007.07.30 -
AVG 7.5.0.476 2007.07.30 -
BitDefender 7.2 2007.07.30 -
CAT-QuickHeal 9.00 2007.07.28 -
ClamAV 0.91 2007.07.30 -
DrWeb 4.33 2007.07.30 -
eSafe 7.0.15.0 2007.07.29 -
eTrust-Vet 31.1.5016 2007.07.30 -
Ewido 4.0 2007.07.29 -
FileAdvisor 1 2007.07.30 -
Fortinet 2.91.0.0 2007.07.30 -
F-Prot 4.3.2.48 2007.07.27 -
F-Secure 6.70.13030.0 2007.07.30 -
Ikarus T3.1.1.8 2007.07.30 -
Kaspersky 4.0.2.24 2007.07.30 -
McAfee 5085 2007.07.27 -
Microsoft 1.2704 2007.07.30 -
NOD32v2 2428 2007.07.30 -
Norman 5.80.02 2007.07.27 -
Panda 9.0.0.4 2007.07.29 -
Prevx1 V2 2007.07.30 -
Rising 19.34.01.00 2007.07.30 -
Sophos 4.19.0 2007.07.26 -
Sunbelt 2.2.907.0 2007.07.28 -
Symantec 10 2007.07.30 -
TheHacker 6.1.7.158 2007.07.30 -
VBA32 3.12.2.1 2007.07.30 -
VirusBuster 4.3.26:9 2007.07.29 -
Webwasher-Gateway 6.0.1 2007.07.30 -

[病毒样本] 又见MSN病毒

本帖子中包含更多资源

本帖子中包含更多资源