Email-Worm.Win32.Iksmas. (來自垃圾邮件) 最后更新:486超过150个样本)

sam.to

071dbb82a64ae0653a629a48c7f0de67  saleslist.exe1
3813d5e7ae45e945354efc67fbb49b56  disc.exe1
to kl

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.

[ 本帖最后由 sam.to 于 2009-2-28 16:43 编辑 ]

Elcondorposa

AVIRA
Begin scan in 'E:\DownLoad\2'
E:\DownLoad\2\disc.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4a1bb6eb.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
E:\DownLoad\2\saleslist.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4a14b6e3.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!

leonfg

eset 全
C:\Documents and Settings\GUNDAM\桌面\2.rar » RAR » discounts.exe2 - a variant of Win32/Waledac.GT trojan
C:\Documents and Settings\GUNDAM\桌面\2.rar » RAR » sales.exe1 - a variant of Win32/Waledac.GT trojan
C:\Documents and Settings\GUNDAM\桌面\3.rar » RAR » sale.exe1 - a variant of Win32/Waledac.GQ trojan
C:\Documents and Settings\GUNDAM\桌面\3.rar » RAR » couponlist.exe2 - a variant of Win32/Waledac.GQ trojan
C:\Documents and Settings\GUNDAM\桌面\3.rar » RAR » couponlist.exe1 - a variant of Win32/Waledac.GQ trojan
C:\Documents and Settings\GUNDAM\桌面\save.rar » RAR » save.exe1 - a variant of Win32/Waledac.GQ trojan

leonfg

eset 1
C:\Documents and Settings\GUNDAM\桌面\2.rar » RAR » disc.exe1 - a variant of Win32/Waledac.GR trojan

[ 本帖最后由 leonfg 于 2009-3-1 00:25 编辑 ]

darreol

a-squared Anti-Malware - 版本 4.0
上次更新: 2009-2-28 12:03:19

扫描设置:

对象: C:\Downloads\postcard.exe2
扫描文件: 开
启发式扫描: 关
ADS 扫描: 开

扫描开始于:        2009-2-28 12:26:49

C:\Downloads\postcard.exe2         已检测: Email-Worm.Win32.Iksmas!IK

已扫描

文件:         1
跟踪记录:         0
Cookies:         0
进程:         0

已发现

文件:         1
跟踪记录:         0
Cookies:         0
进程:         0
注册表键:         0

扫描结束于:        2009-2-28 12:26:49
扫描用时:        0:00:00

utfhv

kv09杀，说是蠕虫。。。

sam.to

7da659d9b2213236fd31390c3defaa59  list.exe
3f375c70af7347ef846d14c32a1e3204  saleslist.exe1
9501ee1ce5806dc3d2097224a2605259  print.exe1
to kl
Hello,

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.

[ 本帖最后由 sam.to 于 2009-3-1 20:32 编辑 ]

ledled

to VB

Palkia

to rs

sam.to

d6c4518cb9517000d6518cf05aa1d0a9   list.ex1e
d6beaf8f236d9b0b87dd64c797a035d7   discounts.exe2

to kl


discounts.exe2 - Email-Worm.Win32.Iksmas.xa,
list.ex1e - Email-Worm.Win32.Iksmas.xb

[ 本帖最后由 sam.to 于 2009-3-1 00:12 编辑 ]