Email-Worm.Win32.Iksmas. (來自垃圾邮件) 最后更新:486超过150个样本)

显示全部楼层 · 发表于 2009-1-1 18:57:44

费尔0

显示全部楼层 · 发表于 2009-1-1 19:02:24

下载过程中被卡巴废了

显示全部楼层 · 发表于 2009-1-1 19:11:24

Begin scan in 'C:\TDDOWNLOAD\postcard.rar'
C:\TDDOWNLOAD\postcard.rar
[0] Archive type: RAR
   --> postcard.exe2
      [DETECTION] Is the TR/Proxy.Gen Trojan
[NOTE]    A backup was created as '49cfa518.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2009年1月1日  19:10
Used time: 00:04 Minute(s)

显示全部楼层 · 发表于 2009-1-3 22:22:37

96455f70a77afd6fcaca168608c1aa0a postcard.exe

to kl

http://www.virustotal.com/analis ... 65096d35ecda2f7ffce

Hello,

postcard.exe_ - Email-Worm.Win32.Iksmas.ag

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

[ 本帖最后由 sam.to 于 2009-1-4 17:31 编辑 ]

显示全部楼层 · 发表于 2009-1-3 22:23:49

Begin scan in 'C:\Users\Kitman\Downloads\postcard.rar'
C:\Users\Kitman\Downloads\postcard.rar
[0] Archive type: RAR
   --> postcard.exe3
      [DETECTION] Is the TR/Proxy.Gen Trojan
[NOTE]    A backup was created as '49d2752a.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-1-3 22:25:32

这个玩意会更新的？我等了两天下载的MD5貌似都是044xxxxxxxxxxxxxxxxxxx的..

显示全部楼层 · 发表于 2009-1-3 22:27:46

由我开帖的一天,我也估计会更新
因為:
1.FS和卡巴报的名字不同
2.看3楼

显示全部楼层 · 发表于 2009-1-3 22:30:20

MD5: 044317A6E6A482E5D491D2CAC932D3FD

看来我人品问题了...碰到的一直是这个..

显示全部楼层 · 发表于 2009-1-3 22:31:41

刚发现这家伙更新了..

显示全部楼层 · 发表于 2009-1-3 22:31:46

你有这worm的网址?

[病毒样本] Email-Worm.Win32.Iksmas. (來自垃圾邮件) 最后更新:486超过150个样本)

本帖子中包含更多资源

回复 14楼 sam.to 的帖子

回复 16楼 qianwenxiang 的帖子

回复 18楼 qianwenxiang 的帖子