SWF X6+1

NobleT

all to norman

kingmuro

过MCAFEE8.7

sam.to

6c07481f486346e7d25844896be44c76   i64.swf
95b8349fc38f71e38433a06979fd644e   i115.swf
2e5c48cb7507074187ddde999faa88f2   i45.swf
75e931842d18a1cf2661e1910d424a48   i16.swf
8519cfc4eba2727451a3a503a796dfab   i28.swf

to kl

Hello,

i115.swf - Exploit.SWF.Agent.y,
i16.swf - Exploit.SWF.Agent.z,
i28.swf - Exploit.SWF.Agent.aa,
i45.swf - Exploit.SWF.Agent.ab,
i64.swf - Exploit.SWF.Agent.ac

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

>
>

Sincerely yours,
Mikhail Gorshenin,
Virus Analyst.
_____________________

[ 本帖最后由 sam.to 于 2009-2-25 14:00 编辑 ]

Sebastian

Starting the file scan:

Begin scan in 'D:\new\i115.swf'
D:\new\i115.swf
    [0] Archive type: SWC
    --> Object
      [DETECTION] Contains recognition pattern of the EXP/Flash.Gen exploit
    [NOTE]      A backup was created as '49d5da89.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\new\i16.swf'
D:\new\i16.swf
    [0] Archive type: SWC
    --> Object
      [DETECTION] Contains recognition pattern of the EXP/Flash.Gen exploit
    [NOTE]      A backup was created as '49dada89.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\new\i28.swf'
D:\new\i28.swf
    [0] Archive type: SWC
    --> Object
      [DETECTION] Contains recognition pattern of the EXP/Flash.Gen exploit
    [NOTE]      A backup was created as '49dcda8a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\new\i45.swf'
D:\new\i45.swf
    [0] Archive type: SWC
    --> Object
      [DETECTION] Contains recognition pattern of the EXP/Flash.Gen exploit
    [NOTE]      A backup was created as '49d9da8c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\new\i64.swf'
D:\new\i64.swf
    [0] Archive type: SWC
    --> Object
      [DETECTION] Contains recognition pattern of the EXP/Flash.Gen exploit
    [NOTE]      A backup was created as '49d8da8e.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2009年2月25日  13:42
Used time: 00:06 Minute(s)

The scan has been done completely.

      0 Scanning directories
      5 Files were scanned
      5 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      5 files were deleted
      0 files were repaired
      5 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
      5 Notes

ledled

All to VB