spdf23555112.exe

显示全部楼层 · 发表于 2009-7-4 18:22:11

http://mp3.linss1.cn/2008/spdf23555112.exe

http://www.virustotal.com/zh-cn/analisis/7f343f95557b9fad1ac8dad661ececfef899fc8f1d0a30d3facdd481ef8b9344-1246607813

Hello,

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.
Trojan.Win32.Agent2.kve

Regards, Tatarinov Ivan
Virus Analyst

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

[ 本帖最后由尤金卡巴斯基于 2009-7-5 17:25 编辑 ]

显示全部楼层 · 发表于 2009-7-4 18:23:47

TO MPAV

显示全部楼层 · 发表于 2009-7-4 18:27:15

to mcafee

显示全部楼层 · 发表于 2009-7-4 18:33:22

杀生成物

显示全部楼层 · 发表于 2009-7-4 18:39:21

红伞都不让下

显示全部楼层 · 发表于 2009-7-4 19:00:28

2009-7-4 19:01:40 1246705300 SYSTEM 1464 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "http://bbs.kafan.cn/attachment.php?aid=574095&k=d7f44a2fb4f5e2a467f8a7fbd5ae5cfb&t=1246705202\spdf23555112.exe" file.

显示全部楼层 · 发表于 2009-7-4 21:06:48

Bad Request (Invalid Hostname)

显示全部楼层 · 发表于 2009-7-4 21:13:28

2009-07-04 21:13:21 文件保护(创建文件) 操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\spdf23555112\spdf23555112.exe
文件路径:C:\Sandbox\Administrator\DefaultBox\drive\C\hUVsElQTvp.dll
2009-07-04 21:13:21 应用程序保护(修改其它进程内存) 操作:阻止
进程路径:C:\WINDOWS\explorer.exe
目标进程:C:\Documents and Settings\Administrator\桌面\新建文件夹\spdf23555112\spdf23555112.exe

显示全部楼层 · 发表于 2009-7-5 05:01:49

Starting the file scan:

Begin scan in 'C:\Users\Administrator\Desktop\spdf23555112.rar'
C:\Users\Administrator\Desktop\spdf23555112.rar
  [0] Archive type: RAR
[NOTE]    The file was deleted!
--> spdf23555112.exe
   [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan

显示全部楼层 · 发表于 2009-7-5 08:58:58

Win32:Rootkit-gen [Rtk]

[病毒样本] spdf23555112.exe

本帖子中包含更多资源

本帖子中包含更多资源