http://7addition.info/t/?7432609db

250662772

http://7addition.info/t/?7432609db
->http://xesjedul.cn/s/in.cgi?11&b95051
-->http://zyejanag.cn/rf/
--->http://zyejanag.cn/rf/repeatWas.pdf
---->http://zyejanag.cn/rf/update.php?id=0 (exe)
---->http://zyejanag.cn/rf/update.php?id=1 (exe)
---->http://zyejanag.cn/rf/update.php?id=2 (exe)
--->http://zyejanag.cn/rf/fromFactLooks.swf
网页分析:250662772

幸福的猪猪

to kaspersky kill。

to avira kill。


Please find a detailed report concerning each individual sample below:

?Filename	Result
load.exe	MALWARE

The file 'load.exe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Spam.Tedroo.I.36. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

?Filename	Result
repeatWas.pdf	MALWARE

The file 'repeatWas.pdf' has been determined to be 'MALWARE'.
Our analysts named the threat EXP/Pidief.PY. The term "EXP/" denotes malware that is able to detect and use certain security vulnerabilities whereby the attacker can get control of the system.Detection will be added to our virus definition file (VDF) with one of the next updates.



to kv kill。

[ 本帖最后由 幸福的猪猪 于 2009-7-22 16:00 编辑 ]

尤金卡巴斯基

原帖由 幸福的猪猪 于 2009-7-22 14:12 发表
to kaspersky kill。

to avira kill。


Please find a detailed report concerning each individual sample below:
?FilenameResult load.exe MALWARE

The file 'load.exe' has been determined to be 'M ...

2009/7/22 23:01:36 已清除 病毒 Email-Worm.Win32.Joleee.cti G:\Temp\Virus\1.rar/load.exe