MediaTubeCodec_ver1.971.45.exe [md5:4ab52]

显示全部楼层 · 发表于 2008-4-21 05:00:38

File:	MediaTubeCodec_ver1.971.45.exe
Status:	INFECTED/MALWARE
MD5:	4ab52b85f9dd4a59baad3a18da90feca
Packers detected:	-
Bit9 reports:	File not found

Scanner results
Scan taken on 20 Apr 2008 20:58:55 (GMT)
A-Squared	Found nothing
AntiVir	Found nothing
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/EncPk-DA
VirusBuster	Found nothing
VBA32	Found Downloader.Zlob.8 (probable variant)

显示全部楼层 · 发表于 2008-4-21 10:03:22

微点只报了企图远程连接：
C:\DOCUMENTS AND SETTINGS\YAQIANG\桌面\MEDIATUBECODEC_VER1.971.45.EXE
协议类型:TCP
本地地址:0.0.0.0
本地端口:2931
远端地址:63.219.178.162(美国)
远端端口:80

显示全部楼层 · 发表于 2008-4-21 10:04:18

运行连出63.219.178.162: 80
访问websoftcodecdriver.com

显示全部楼层 · 发表于 2008-4-21 10:20:03

2008-4-21 10:21:52 内核文件 'D:\firefox download\MediaTubeCodec_ver1.971.45.rar' 已发送到 ESET 进行分析。

显示全部楼层 · 发表于 2008-4-21 10:32:58

过了微点...
忘记开EQ...
还好是影子系统...

显示全部楼层 · 发表于 2008-4-21 11:23:13

MediaTubeCodec_ve...45.exe UNDER ANALYSIS

显示全部楼层 · 发表于 2008-4-21 11:41:01

TO KL

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Namestnikov Yury
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

[ 本帖最后由 wangjay1980 于 2008-4-21 12:49 编辑 ]

显示全部楼层 · 发表于 2008-4-21 11:53:56

微点砍掉

显示全部楼层 · 发表于 2008-4-21 12:14:50

IK
I:\virus\样本区\MediaTubeCodec_ver1[1].971.45.rar:\MediaTubeCodec_ver1.971.45.exe - Suspect code-parts found (Level: 35)
I:\virus\样本区\MediaTubeCodec_ver1[1].971.45.rar

2 Files scanned
(1 Archiv with 1 file)
0 Signatures found
1 Suspect code-part found
Used time: 0:13.953

显示全部楼层 · 发表于 2008-4-21 12:14:59

http://research.sunbelt-software.com/ViewMalware.aspx?id=4083535

[病毒样本] MediaTubeCodec_ver1.971.45.exe [md5:4ab52]

本帖子中包含更多资源

本帖子中包含更多资源