3(56楼有新) codec.exe过所有主流

显示全部楼层 · 发表于 2009-3-27 23:41:28

c64bf36dab1c2489c7d0160690ecbf7e  file.exe3
a0d70307212887c615c824b20f15901e  codec.exe3
7606d1357b577d114e49214d0d25f465  winpc.exe3

to kl

Hello,

codec.exe3 - Trojan-Downloader.Win32.FraudLoad.dzc
file.exe3 - Trojan.Win32.Agent.bxop

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

winpc.exe3 - not-a-virus:FraudTool.Win32.Defender2009.f

New potentially risk software was found in this file. It's detection will be included in the next update. Thank you for your help.

[ 本帖最后由 sam.to 于 2009-5-3 23:39 编辑 ]

显示全部楼层 · 发表于 2009-3-27 23:49:07

File ID    Filename    Size (Byte) Result
25303178    file.exe3    96 KB    UNDER ANALYSIS
25303090    codec.exe3    105 KB    MALWARE
25303091    winpc.exe3    997.5 KB    MALWARE

显示全部楼层 · 发表于 2009-3-27 23:49:35

过BD

显示全部楼层 · 发表于 2009-3-28 00:05:44

to VB

显示全部楼层 · 发表于 2009-3-28 00:37:01

TO 2-DW
file.exe3 - infected with BackDoor.Tdss.81

显示全部楼层 · 发表于 2009-3-28 06:33:20

McAfee miss all
To McAfee

显示全部楼层 · 发表于 2009-4-19 13:11:07

fd9191d947e2c5d782c9571eb72d2c8f  codec.exe1
cf49b4bd3b98b34536a319cb2f06f421  codec.exe2
097f60c1611105ad6baf76f3cc6656f6  codec.exe3
ef89c0aa4ed2ca56a4d6e77fda4dff3c  codec.exe4
5c0bd86885fbd22281792b5ad0bfba5c  codec.exe5
040828eec573a0a4d2e27b5933c3fe2a  codec.exe6
to kl

Hello,

codec.exe1 - Trojan-Downloader.Win32.Agent.brrl
codec.exe2 - Trojan-Downloader.Win32.Agent.brrm
codec.exe3 - Trojan-Downloader.Win32.Agent.brrn
codec.exe4 - Trojan-Downloader.Win32.Agent.brro
codec.exe5 - Trojan-Downloader.Win32.Agent.brrq
codec.exe6 - Trojan-Downloader.Win32.Agent.brrp

[ 本帖最后由 sam.to 于 2009-4-20 11:25 编辑 ]

显示全部楼层 · 发表于 2009-4-19 14:38:57

TO AVIRA

显示全部楼层 · 发表于 2009-4-19 17:08:44

2009-4-19 17:10:03 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\codec1.exe
目标: HKEY_CURRENT_USER\Control Panel\don't load\scui.cpl
值: No
规则: [注册表组]系统相关设置 -> [注册表]HKEY_CURRENT_USER\Control panel\Don't load

2009-4-19 17:10:03 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\codec1.exe
目标: HKEY_CURRENT_USER\Control Panel\don't load\wscui.cpl
值: No
规则: [注册表组]系统相关设置 -> [注册表]HKEY_CURRENT_USER\Control panel\Don't load

2009-4-19 17:10:03 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\codec1.exe
目标: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify
值: 1
规则: [注册表组]系统相关设置 -> [注册表]HKEY_LOCAL_MACHINE\Software\Microsoft\Security center

2009-4-19 17:10:03 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\codec1.exe
目标: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify
值: 1
规则: [注册表组]系统相关设置 -> [注册表]HKEY_LOCAL_MACHINE\Software\Microsoft\Security center

2009-4-19 17:10:03 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\codec1.exe
目标: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify
值: 1
规则: [注册表组]系统相关设置 -> [注册表]HKEY_LOCAL_MACHINE\Software\Microsoft\Security center

2009-4-19 17:10:03 创建文件阻止
进程: c:\documents and settings\administrator\桌面\codec1.exe
目标: C:\WINDOWS\ieocx.dll
规则: [文件组]关系到系统启动运行的文件_阻止建改删 -> [文件]c:\windows\*

2009-4-19 17:10:04 创建新进程阻止并结束进程
进程: c:\documents and settings\administrator\桌面\codec1.exe
目标: c:\windows\system32\net.exe
命令行: C:\WINDOWS\system32\net.exe stop "Security Center"
规则: [应用程序]* -> [子应用程序]c:\windows\system32\net*.exe

显示全部楼层 · 发表于 2009-4-19 20:55:38

to McAfee

[病毒样本] 3(56楼有新) codec.exe过所有主流

本帖子中包含更多资源

本帖子中包含更多资源

回复 7楼 sam.to 的帖子