Email-Worm.Win32.Iksmas. (來自垃圾邮件) 最后更新:486超过150个样本)

显示全部楼层 · 发表于 2009-2-26 11:25:46

83f7048d2348e787d7f8220a6c05f6dc sales.exe1
to kl

sales.exe1 - Email-Worm.Win32.Iksmas.wt

[ 本帖最后由 sam.to 于 2009-2-28 16:42 编辑 ]

显示全部楼层 · 发表于 2009-2-26 11:27:09

VirusBuster found nothing

显示全部楼层 · 发表于 2009-2-26 12:10:14

继续跟进，，，好像不是真的worm样吧、？？

显示全部楼层 · 发表于 2009-2-26 17:21:41

01491dfb71590bf6613e3b8e275f2b60 coupons.exe2
10060fa9c37a0bb603efedbcbb553693 salelist.exe1

to kl

Hello,

coupons.exe_ - Email-Worm.Win32.Iksmas.ua,
salelist.exe_ - Email-Worm.Win32.Iksmas.ub

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

> Thank you.
>
Please quote all when answering.
-----------------
Regards, Davidow Dmitriy
Virus Analyst, Kaspersky Lab.
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

[ 本帖最后由 sam.to 于 2009-2-26 21:03 编辑 ]

显示全部楼层 · 发表于 2009-2-26 17:25:06

VirusBuster found nothing

显示全部楼层 · 发表于 2009-2-26 17:56:40

MISS TO-DW

显示全部楼层 · 发表于 2009-2-26 18:23:01

to rs

显示全部楼层 · 发表于 2009-2-26 21:34:53

68a297230923485fdf62c3236ecb3922 stopcrisis.exe2
000ddfd23431093083932ab3586ccc8e coupon.exe1
to kl
Hello,

coupon.exe_ - Email-Worm.Win32.Iksmas.uc,
stopcrisis.exe_ - Email-Worm.Win32.Iksmas.ud

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

>
>
Please quote all when answering.
-----------------
Regards, Davidow Dmitriy
Virus Analyst, Kaspersky Lab.
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

[ 本帖最后由 sam.to 于 2009-2-26 23:37 编辑 ]

显示全部楼层 · 发表于 2009-2-26 21:41:28

Begin scan in 'C:\Users\Kitman\Desktop\2'
C:\Users\Kitman\Desktop\2\coupon.exe1
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    A backup was created as '4a1b9c6c.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\Kitman\Desktop\2\stopcrisis.exe2
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '4a159c71.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-2-26 22:09:22

DR.WEBc回覆
Original file name: coupon.exe
Original file name: stopcrisis.exe
Virus: Trojan.Spambot.4331.

Thank you for the cooperation.

--
Yours sincerely,
Virus Monitoring Service Doctor Web Ltd.

[病毒样本] Email-Worm.Win32.Iksmas. (來自垃圾邮件) 最后更新:486超过150个样本)

本帖子中包含更多资源

回复 261楼 sam.to 的帖子

本帖子中包含更多资源

回复 264楼 sam.to 的帖子

261+264

本帖子中包含更多资源

回复 268楼 sam.to 的帖子

回复 268楼 sam.to 的帖子