Email-Worm.Win32.Iksmas. (來自垃圾邮件) 最后更新:486超过150个样本)

ledled

All to VB

sam.to

discounts.exe%10 - Email-Worm.win32.iksmas.abg
discounts.exe%11 - Email-Worm.win32.iksmas.abh
discounts.exe%14 - Email-Worm.win32.iksmas.abi
discounts.exe%16 - Email-Worm.win32.iksmas.abj
discounts.exe%4,run.exe%5 - Email-Worm.win32.iksmas.abm
discounts.exe%6 - Email-Worm.win32.iksmas.abk
discounts.exe%7 - Email-Worm.win32.iksmas.abl
list.exe%1 - Email-Worm.win32.iksmas.abp
list.exe%17 - Email-Worm.win32.iksmas.abn
list.exe%2 - Email-Worm.win32.iksmas.abo
print.exe%3 - Email-Worm.win32.iksmas.abq
run.exe%12 - Email-Worm.win32.iksmas.abr
run.exe%13 - Email-Worm.win32.iksmas.abs
run.exe%15 - Email-Worm.win32.iksmas.abt
run.exe%8 - Email-Worm.win32.iksmas.abv
run.exe%9 - Email-Worm.win32.iksmas.abu

[ 本帖最后由 sam.to 于 2009-3-10 13:33 编辑 ]

wcj20236

原帖由 sam.to 于 2009-3-10 11:56 发表
TO KL

微点全杀。

sam.to

cf9e176376e086877bd7ea6d9632fff6  print.exe@2
7a1272885b475f15e39592ce0c9a8e5b  print.exe@4
d35c13b830c85ed3a51355f27010a393  print.exe@5
2b15b4cc1b013e202439640757f0ec27  print.exe@6
d99a9de304ac47d9dfb6e45b6698c49b  list.exe@7
5fe68f880fc96b875aa706b78cf27fb4  save.exe@8
986aea415bb9c64fe3867892e1e18fe6  save.exe@9
c48941ef9c7907967c5610bd85775acd  list.exe@1
64c20570d41abfa278d53a3ebf5da45a  print.exe@3
to kl

ledled

All to VB

wcj20236

原帖由 sam.to 于 2009-3-10 15:33 发表
cf9e176376e086877bd7ea6d9632fff6  print.exe@2
7a1272885b475f15e39592ce0c9a8e5b  print.exe@4
d35c13b830c85ed3a51355f27010a393  print.exe@5
2b15b4cc1b013e202439640757f0ec27  print.exe@6
d99a9de304ac ...

微点除了一个样本无法运行外，其余全杀。。
程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9[1]\W\LIST@1.EXE
是否删除木马程序及其衍生物?

程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9[1]\W\LIST@7.EXE
是否删除木马程序及其衍生物?

程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9[1]\W\SAVE@8.EXE
是否删除蠕虫程序及其衍生物?

程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9[1]\W\SAVE@9.EXE
是否删除蠕虫程序及其衍生物?

程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9[1]\W\PRINT@2.EXE
是否删除蠕虫程序及其衍生物?

程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9[1]\W\PRINT@3.EXE
是否删除蠕虫程序及其衍生物?

程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9[1]\W\PRINT@6.EXE
是否删除蠕虫程序及其衍生物?

程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9[1]\W\PRINT@5.EXE
是否删除蠕虫程序及其衍生物?

Palkia

to rs

sam.to

2d8d64fa1e07237c67aa4c8230f98a90  list.exe^7
78171eb0793d61be55c1aabfb482f55c  save.exe_1
2eb3e31b25755047eb55de683d16ff48  save.exe_2
7831326e1a5712f79f6ea80d39fc69e6  save.exe_3
0457542282052a8a6de905886c2e9676  print.exe_4
029852f2cfce2e777dd0056543d59e14  print.exe_5
b9196fa1b6ddbb28fa1d804533f92730  print.exe_6
to kl

.exe^7 - Email-Worm.Win32.Iksmas.aby
print.exe_4 - Email-Worm.Win32.Iksmas.abz
print.exe_5 - Email-Worm.Win32.Iksmas.aca
print.exe_6 - Email-Worm.Win32.Iksmas.acb
save.exe_1 - Email-Worm.Win32.Iksmas.acc
save.exe_2 - Email-Worm.Win32.Iksmas.abx
save.exe_3 - Email-Worm.Win32.Iksmas.acd

[ 本帖最后由 sam.to 于 2009-3-11 11:44 编辑 ]

ledled

All to VB

sam.to

3304c18ad9b37e63f2f11f66af740454  list.exe=5
6916a0d51b0b80a769d4069102b0eb4d  list.exe=4
e236ea50e01da5251c058520625ce389  list.exe=3
6bb24abc53d5db083ef88b7ad84848a7  list.exe=2
d19571f4908b3f4b38b899f68c3b4b54  list.exe=1
to kl

list.exe=1 - Email-Worm.Win32.Iksmas.act,
list.exe=2 - Email-Worm.Win32.Iksmas.acu,
list.exe=3 - Email-Worm.Win32.Iksmas.acv,
list.exe=5 - Email-Worm.Win32.Iksmas.acw,
list.exe_ - Email-Worm.Win32.Iksmas.acs

[ 本帖最后由 sam.to 于 2009-3-11 20:56 编辑 ]