Waledac x 2

显示全部楼层 · 发表于 2009-2-18 20:03:43

MD5: 469154998FF93081B65E281F3F1DBE1D
Unidentified Packer. *
Notice:0x00000001 extra bytes found,starting at offset 0x0006BC00.

MD5: 49FB22E58E566BF5E462A11CE8B354D3
Unidentified Packer. *
Notice:0x00000001 extra bytes found,starting at offset 0x0006B400.

显示全部楼层 · 发表于 2009-2-18 20:06:21

Begin scan in 'D:\w2.rar'
D:\w2.rar
[0] Archive type: RAR
--> save.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
--> start.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '49c9f9e5.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-2-18 20:31:18

To KL

显示全部楼层 · 发表于 2009-2-18 20:38:15

过诺顿11.0版本

显示全部楼层 · 发表于 2009-2-18 20:46:36

2009-02-18 20:45:54 修改文件操作:阻止并结束进程
进程路径:E:\virus\save.exe
文件路径:C:\AUTOEXEC.BAT
触发规则:应用程序规则->禁止读取的文件->*.*->%SystemDrive%\AUTOEXEC.BAT

2009-02-18 20:45:55 修改文件操作:阻止并结束进程
进程路径:E:\virus\start.exe
文件路径:C:\AUTOEXEC.BAT
触发规则:应用程序规则->禁止读取的文件->*.*->%SystemDrive%\AUTOEXEC.BAT

非常恶心的病毒，中了后，会开不了机的哦？？？？？

显示全部楼层 · 发表于 2009-2-18 20:52:28

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... c5&t=1234961526
Information: Is the TR/Dropper.Gen Trojan

--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 8.0.15.0, AVE 8.2.0.83, VDF 7.1.2.42

显示全部楼层 · 发表于 2009-2-18 20:57:25

Hello,

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.

Sincerely yours,
Gashkin Alex,
Virus Analyst.

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2009-2-18 21:26:43

BitDefender
報start Trojan.Waledac.Gen.1
上報save

显示全部楼层 · 发表于 2009-2-18 21:35:45

卡巴丢了

显示全部楼层 · 发表于 2009-2-18 21:41:04

to VB

[病毒样本] Waledac x 2

本帖子中包含更多资源

浏览过的版块