despmed.exe [md5:2dccdc]

mofunzone

今日来看，卡巴又要哭了

File:	despmed.exe
Status:	INFECTED/MALWARE
MD5:	2dccdc88357a8cec0bc09147210770db
Packers detected:	-
Bit9 reports:
Scanner results
Scan taken on 10 May 2008 18:38:47 (GMT)
A-Squared	Found  nothing
AntiVir	Found TR/Crypt.XPACK.Gen
ArcaVir	Found  nothing
Avast	Found  nothing
AVG Antivirus	Found  nothing
BitDefender	Found  nothing
ClamAV	Found  nothing
CPsecure	Found  nothing
Dr.Web	Found  nothing
F-Prot Antivirus	Found  nothing
F-Secure Anti-Virus	Found  nothing
Fortinet	Found  nothing
Ikarus	Found  nothing
Kaspersky Anti-Virus	Found  nothing
NOD32	Found a variant of Win32/TrojanDownloader.Small.OBW
Norman Virus Control	Found Sandbox: W32/Downloader;  [ General information ]         * Creating several executable files on hard-drive.     * File length:         5120 bytes. [ Changes to filesystem ]     * Creates file C:\2206172990.     * Creates file C:\ftklhae.exe. [ Network services ]     * Opens URL: http://ccfelomvhk.com/progs/dthuym/llzmqq.php?adv=adv518.     * Connects to "ccfelomvhk.com" on port 80 (TCP).     * Opens URL: ccfelomvhk.com/progs/dthuym/llzmqq.php?adv=adv518.     * Opens URL: http://ccfelomvhk.com/progs/dthuym/vsjjxbs.php.     * Opens URL: ccfelomvhk.com/progs/dthuym/vsjjxbs.php. [ Security issues ]     * Starting downloaded file - potential security problem. [ Process/window information ]     * Creates process "ftklhae.exe".
Panda Antivirus	Found  nothing
Sophos Antivirus	Found Mal/EncPk-DB
VirusBuster	Found  nothing
VBA32	Found  nothing

不知道怎么去看

cmd winlogo一大堆的。。

nab都看不过去了 成功清楚

Palkia

...kv 0

sbbdms

Kaspersky miss
TO KL

Hello.
New malicious software was found in the attached file.
Its detection will be included in the next update. Thank you for your help.
-----------------
Regards, Vladimir Lebedev
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com


> Attachment: virus.rar

[ 本帖最后由 sbbdms 于 2008-5-11 12:21 编辑 ]

qigang

RS20.43.62未杀！

allinwonderi

上报累死了

wangjay1980

K

kingmuro

金山不杀