Downloader Tipikit

黄金马甲出租

00403000  vvseeotjwohttp://58.65.239.115/check/tpktsk.php.c:\confs.my.http
00403040  ://58.65.239.115/check/wumxwke.php.svchost.t__..... -A.|..exe.rl
00403080  vk.http://58.65.239.115/check/xrcbboq.php?ssgvvf=xmkgiz&tsk=.vmd
004030C0  str.tmp.fspeoacnmt3?.Google Online Services.Urlmon.dll.

ykz1991

其实virusbuster报的东西最多的是.gen，其次是pack
到时用正经的保法很少

sbbdms

10分钟回复。。。。[:1:] [:1:] [:1:]

Hello,

ieupdater.exe_ - Trojan-Downloader.Win32.Winlagons.mc

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Namestnikov Yury
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: ieupdater.rar

hahacomcn

Begin scan in 'C:\Documents and Settings\haha\桌面\ieupdater.rar'
C:\Documents and Settings\haha\桌面\ieupdater.rar
  [0] Archive type: RAR
    --> ieupdater.exe
          [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/FSG). Please verify the origin of the file
      [NOTE]      A backup was created as '48b745a5.qua'  ( QUARANTINE )

qigang

RS20.46.62未杀！

allinwonderi

[Found security risk]         <W32/Tipikit.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\ieupdater.rar->ieupdater.exe

---------------------------------------------------------------------
Scan ended:        2008-6-1, 20:27:11
Duration:        0:00:00

Scan result:

Scanned files:                 6
Infected objects:         1
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

电影结束了

Trojan.Downloader.Tipikit.F (BD 引擎)

BING126

McAfee MISS