MediaTubeCodec_ver1.971.45.exe [md5:dde6c0]

显示全部楼层 · 发表于 2008-4-19 06:19:48

File:	MediaTubeCodec_ver1.971.45.exe
Status:	INFECTED/MALWARE
MD5:	dde6c0ecaeb644b5190b3efe0284b35c
Packers detected:	-
Bit9 reports:	File not found

Scanner results
Scan taken on 18 Apr 2008 22:18:01 (GMT)
A-Squared	Found nothing
AntiVir	Found nothing
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/EncPk-DA
VirusBuster	Found nothing
VBA32	Found MalwareScope.Worm.Nuwar-Glowa.1

显示全部楼层 · 发表于 2008-4-19 06:28:32

To Kaspersky Lab

显示全部楼层 · 发表于 2008-4-19 09:30:58

D:\firefox download\MediaTubeCodec_ver1.971.45.rar » RAR » MediaTubeCodec_ver1.971.45.exe - Win32/TrojanDownloader.Agent.NXN trojan - was a part of the deleted object

显示全部楼层 · 发表于 2008-4-19 09:58:59

IKARUS
I:\virus\样本区\MediaTubeCodec_ver1[1].971.45.rar:\MediaTubeCodec_ver1.971.45.exe - Signature 'MalwareScope.Worm.Nuwar-Glowa.1' found
I:\virus\样本区\MediaTubeCodec_ver1[1].971.45.rar

2 Files scanned
(1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.016

显示全部楼层 · 发表于 2008-4-19 10:00:12

2008-4-19 9:59:28 http://bbs.kafan.cn/attachment.p ... dec_ver1.971.45.exe GreenBrowser.exe 已被拒绝: Trojan-Downloader.Win32.Zlob.lkj 卡巴斯基8.0报的

显示全部楼层 · 发表于 2008-4-19 10:23:47

The requested object is INFECTED with the following viruses: Trojan-Downloader.Win32.Zlob.lkj

显示全部楼层 · 发表于 2008-4-19 10:28:44

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.KAFAN\桌面\MEDIATUBECODEC_VER1.971.45.EXE
是否阻止该进程继续运行?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.KAFAN\桌面\MEDIATUBECODEC_VER1.971.45.EXE
是否删除病毒程序及其衍生物?

显示全部楼层 · 发表于 2008-4-19 14:06:25

【1】进程：
路径： F:\Users\ranguangning终极管理员帐户\Desktop\MediaTubeCodec_ver1.971.45.exe
PID: 8908
网络信息：
IP 地址： 85.255.120.234
信任的区域：否
协议： TCP

【2】在用户临时虚拟目录下生成msprint.exe,红伞报毒。

【3】进程：
路径： F:\Users\ranguangning终极管理员帐户\Desktop\MediaTubeCodec_ver1.971.45.exe
PID: 8908
网络信息：
IP 地址： 63.219.178.162
信任的区域：否
协议： TCP

【4】进程：
路径： F:\Users\ranguangning终极管理员帐户\Desktop\MediaTubeCodec_ver1.971.45.exe
PID: 8908
网络信息：
IP 地址： 77.91.228.187
信任的区域：否
协议： TCP

【5】测试完毕，联网频繁，一个生成物被杀。

显示全部楼层 · 发表于 2008-4-19 20:06:30

deleted: Trojan program Trojan-Downloader.Win32.Zlob.lkj File: F:\Download\MediaTubeCodec_ver1.971.45.rar/MediaTubeCodec_ver1.971.45.exe

显示全部楼层 · 发表于 2008-4-19 20:25:14

McAfee MISS

[病毒样本] MediaTubeCodec_ver1.971.45.exe [md5:dde6c0]

本帖子中包含更多资源

Kaspersky 2009

浏览过的版块