Email-Worm.Win32.Iksmas. (來自垃圾邮件) 最后更新:486超过150个样本)

sam.to

13c222a47b174e6e44d448211e4c4c12   stopcrisis.exe2
d37065086f339ba273297a6732b2fd4c   disc.exe
to kl

ledled

to VB

Elcondorposa

AVIRA
E:\DownLoad\25\disc.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4a22a5ad.qua'  ( QUARANTINE )
E:\DownLoad\25\stopcrisis.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4a1ea5b9.qua'  ( QUARANTINE )

Palkia

to rs

leonfg

eset k all
C:\Documents and Settings\GUNDAM\桌面\2.rar » RAR » disc.exe2 - a variant of Win32/Waledac.HC trojan
C:\Documents and Settings\GUNDAM\桌面\2.rar » RAR » stopcrisis.exe2 - a variant of Win32/Waledac.HC trojan

sam.to

37f949442ff6a036ff64851faf3d4097   salelist.exe3
to kl

Hello,

salelist.exe3 - Packed.Win32.Krap.i

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Sincerely yours,
Vyacheslav Zakorzhevsky,
Senior Malware Analyst,
Heuristic detection group

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

[ 本帖最后由 sam.to 于 2009-3-6 22:25 编辑 ]

ledled

VirusBuster found nothing

leonfg

C:\Documents and Settings\GUNDAM\桌面\salelist.rar » RAR » salelist.exe3 - a variant of Win32/Waledac.HC trojan

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\Administrator\Desktop\salelist.rar'
C:\Users\Administrator\Desktop\salelist.rar
  [0] Archive type: RAR
    [NOTE]      The file was deleted!
    --> salelist.exe3
      [DETECTION] Is the TR/Dropper.Gen Trojan

kingmuro

过咖啡8.7i