SWF

尤金卡巴斯基

a-squared	4.5.0.24	2009.09.25	Trojan.Win32.Swif!IK
AhnLab-V3	5.0.0.2	2009.09.24	-
AntiVir	7.9.1.25	2009.09.24	-
Antiy-AVL	2.0.3.7	2009.09.25	-
Authentium	5.1.2.4	2009.09.25	-
Avast	4.8.1351.0	2009.09.24	SWF:Agent-B
AVG	8.5.0.412	2009.09.24	-
BitDefender	7.2	2009.09.25	Trojan.SWF.Dropper.Gen
CAT-QuickHeal	10.00	2009.09.25	-
ClamAV	0.94.1	2009.09.25	-
Comodo	2429	2009.09.25	-
DrWeb	5.0.0.12182	2009.09.25	-
eSafe	7.0.17.0	2009.09.24	-
eTrust-Vet	31.6.6760	2009.09.25	-
F-Prot	4.5.1.85	2009.09.24	-
F-Secure	8.0.14470.0	2009.09.25	-
Fortinet	3.120.0.0	2009.09.25	-
GData	19	2009.09.25	Trojan.SWF.Dropper.Gen
Ikarus	T3.1.1.72.0	2009.09.25	Trojan.Win32.Swif
Jiangmin	11.0.800	2009.09.25	-
K7AntiVirus	7.10.853	2009.09.24	-
Kaspersky	7.0.0.125	2009.09.25	-
McAfee	5751	2009.09.24	-
McAfee+Artemis	5751	2009.09.24	-
McAfee-GW-Edition	6.8.5	2009.09.25	-
Microsoft	1.5005	2009.09.23	Trojan:Win32/Swif.E
NOD32	4455	2009.09.24	-
Norman	6.01.09	2009.09.24	-
nProtect	2009.1.8.0	2009.09.24	-
Panda	10.0.2.2	2009.09.24	-
PCTools	4.4.2.0	2009.09.24	-
Prevx	3.0	2009.09.25	-
Rising	21.48.41.00	2009.09.25	-
Sophos	4.45.0	2009.09.25	-
Sunbelt	3.2.1858.2	2009.09.24	-
Symantec	1.4.4.12	2009.09.25	-
TheHacker	6.5.0.2.017	2009.09.24	-
TrendMicro	8.950.0.1094	2009.09.25	-
VBA32	3.12.10.11	2009.09.25	-
ViRobot	2009.9.25.1953	2009.09.25	-
VirusBuster	4.6.5.0	2009.09.24	-

Hello,

whichHSimply.swf - Exploit.SWF.Agent.cf

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

[ 本帖最后由 尤金卡巴斯基 于 2009-9-26 16:35 编辑 ]

悠柚

to IObit

王子带着刀

TF没有提示

kerry

微点没反应

尤金卡巴斯基

2009/9/26 16:29:40        已清除        木马程序 Exploit.SWF.Agent.cf        G:\Temp\Virus\whichHSimply.rar/whichHSimply.swf//Swf2Swc

BING126

to McAfee

benq80282

小紅傘下載已阻擋!
whichHSimply[1].rar
SWF/Drop.Agent.H

sam.to

to ll,eset,antivir


Mcafee(Auto Reply):

  Upon analysis the file submitted does not appear to contain one of the 200,000 known
threats in the AutoImmune database. The file may contain a new threat, or no code
capable of being infected. Your submission is being forwarded to an Avert Labs
Researcher for further analysis. You will be contacted by AVERT through e-mail with
the results of that analysis.



http://samples.nod32.com.hk/inde ... f754eddfd5998fda07c



The file 'whichHSimply.swf2' has been determined to be 'MALWARE'. Our analysts named the threat SWF/Drop.Agent.H. The term "SWF/" denotes a virus or script in the Shockwave Flash format.Detection will be added to our virus definition file (VDF) with one of the next updates.

[ 本帖最后由 sam.to 于 2009-9-26 23:40 编辑 ]