Fraudload+pcdef

显示全部楼层 · 发表于 2009-7-21 22:03:15

本想找TDSS地址的。。不想却碰到了这种2个半月没追踪的病毒。。作者只能怪他自己倒霉了。。。。
不过到目前为止还未找到TDSS批量地址。。得了。。继续给卡巴完善SW基因去。。。。。。

显示全部楼层 · 发表于 2009-7-21 23:12:27

kv TrojanDownloader.Agent.bnbe清空了

显示全部楼层 · 发表于 2009-7-21 23:47:46

瑞星2010

显示全部楼层 · 发表于 2009-7-22 00:25:52

fraudloads

TR/Crypt.ZPACK.Gen * ALL

other three...

Begin scan in 'G:\others'
G:\others\pcdef(1).exe
  [0] Archive type: NSIS
[DETECTION] Is the TR/BHO.BaiduSP.2 Trojan
--> [ProgramFilesDir]/snav/Snav.dll
   [DETECTION] Contains recognition pattern of the ADSPY/BaiduBar.MS adware or spyware
[NOTE]    The file was deleted!
G:\others\pcdef.exe
[DETECTION] Contains recognition pattern of the PHISH/Fraud.WinPCDefender.BB phishing file/email
[NOTE]    The file was deleted!

The file 'codec.exe' has been determined to be 'MALWARE'.
Our analysts discovered that the file is a Security Privacy Risk(SPR). In particular it means that it is a program that might possiblybe able to affect the security of your system, might trigger activitiesyou might not want or might violate your privacy.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2009-7-22 00:57:30

DR.WEB
Trojan.Fakealert.4493 清空兩個7-Z包

\pcdef.exe - infected with Trojan.Packed.2463
codec.exe - infected with Trojan.DownLoad.35596

Original file name: pcdef(1).exe
Threat: Adware.Baidu.1123

Thank you for the cooperation.

--
Yours sincerely,
Virus Monitoring Service
Doctor Web Ltd.

[ 本帖最后由黑衣~魂于 2009-7-22 01:11 编辑 ]

显示全部楼层 · 发表于 2009-7-22 04:26:24

nod miss only pcdef(1).exe, other kill

[病毒样本] Fraudload+pcdef

本帖子中包含更多资源

本帖子中包含更多资源