Email-Worm.Win32.Iksmas. (來自垃圾邮件) 最后更新:486超过150个样本)

Palkia

to rs

sam.to

203af067a87dd7f7230612e354c20fa4   nocrisis.exe5
3e6571f3ad83b3c8b9eedfaf480f5186   disc.exe
to kl

Hello,


disc.exe2 - Email-Worm.Win32.Iksmas.zp
nocrisis.exe5 - Email-Worm.Win32.Iksmas.zr

[ 本帖最后由 sam.to 于 2009-3-4 22:55 编辑 ]

黑衣~魂

ALL TO-DW

Palkia

to rs

leonfg

C:\Documents and Settings\GUNDAM\桌面\2.rar » RAR » disc.exe2 - a variant of Win32/Waledac.HC trojan
C:\Documents and Settings\GUNDAM\桌面\2.rar » RAR » nocrisis.exe5 - a variant of Win32/Waledac.HC trojan

sam.to

d6fcb5430c6500d256da630739e5031e   couponlist.exe2
6f5988fbf7321e188987260ff333375a   coupon.exe1
e1190ca195c06c582761a63e38201f32   discounts.exe3
to kl

Hello,


coupon.exe1,couponlist.exe2,discounts.exe3 - Email-Worm.Win32.Iksmas.gen

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

[ 本帖最后由 sam.to 于 2009-3-5 00:40 编辑 ]

sam.to

Email-Worm.Win32.Iksmas.gen         23:25        
http://www.kaspersky.com/viruswa ... 5&hour_offset=5

汗,早知不上报卡巴

ZZ还未到便有gen

linjw

Begin scan in 'D:\3.rar'
D:\3.rar
    [0] Archive type: RAR
    --> discounts.exe3
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> coupon.exe1
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    --> couponlist.exe2
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      A backup was created as '4a20a390.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!

leonfg

eset k all
C:\Documents and Settings\GUNDAM\桌面\3.rar » RAR » discounts.exe3 - a variant of Win32/Waledac.GQ trojan
C:\Documents and Settings\GUNDAM\桌面\3.rar » RAR » coupon.exe1 - a variant of Win32/Waledac.HB trojan
C:\Documents and Settings\GUNDAM\桌面\3.rar » RAR » couponlist.exe2 - a variant of Win32/Waledac.HB trojan

ledled

to VB