【最近的关于内嵌恶意代码的mp3/wma清除工具（金山毒霸）】【avira引擎得更新了】

显示全部楼层 · 发表于 2008-8-6 20:58:12

【看来红伞引擎又得更新了】

[ 本帖最后由 ranguangning 于 2008-8-6 21:16 编辑 ]

显示全部楼层 · 发表于 2008-8-6 21:06:36

金山 0

显示全部楼层 · 发表于 2008-8-6 22:01:10

红伞不知道上报了没有，得更新引擎和基因。

显示全部楼层 · 发表于 2008-8-6 22:03:47

能清楚的话那是最好了

显示全部楼层 · 发表于 2008-8-6 22:09:38

恩，是清除，不是删除。

显示全部楼层 · 发表于 2008-8-6 23:01:02

ACCESS DENIED
The requested URL could not be retrieved

While trying to retrieve the URL: http://bbs.kafan.cn/attachment.p ... a8&t=1218034815

The folowing error was encountered:

* The requested object is INFECTED. The following viruses Trojan-Downloader.WMA.GetCodec.d were found

Please contact your service provider if you feel this is incorrect.

Generated Wed Aug 06 22:59:36 2008 by Kaspersky Anti-Virus 7.0

显示全部楼层 · 发表于 2008-8-6 23:18:39

金山毒霸看来快一步了，但这不应该发本区吧?

显示全部楼层 · 发表于 2008-8-6 23:19:24

WMA:Wimad [Drp]

显示全部楼层 · 发表于 2008-8-7 06:24:09

该文件是伪装为mp3的asf文件。
小红伞19引擎已经修正的对此威胁的检查。
File ID  Filename Size (Byte) Result
25105877  内嵌恶意代码的mp3文件.rar...文件.rar 495.71 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename Size (Byte) Result
25105714  02.mp3  564.85 KB  MALWARE

Please find a detailed report concerning each individual sample below:

Filename Result
02.mp3  MALWARE

The file '02.mp3' has been determined to be 'MALWARE'. Our analysts named the threat SPR/ASF.GetCodec.Gen. The term "SPR/" ("Security or Privacy Risk") denotes a program that might possibly be able to affect the security of your system, might trigger activities you might not want or might violate your privacy.This malware is detected by a special detection routine from the engine module.

显示全部楼层 · 发表于 2008-8-7 07:39:35

第一个是英语~~

[病毒样本] 【最近的关于内嵌恶意代码的mp3/wma清除工具（金山毒霸）】【avira引擎得更新了】