4(45 楼有新)

sam.to

8adcd99589a38bc7ad619ec22f4013f5   dd.exe
cc0101276403bd3c9bcbe66f86dc945b   av1.swf
859731506324f9283185c952b42b0bac   av2.swf
e2bcbfbc23ef22959a0c2720637f0c2b   3.css
b5cddeae168dad7ae293726c2f74d007   2.css
04f4b7bc6b2a344f05bc7d5f54101cc5   x.js
to kl



Hello,

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.

2.css
         Exploit.JS.Ssreader.a

3.css
         Exploit.JS.RealPlr.qw

av1.swf
         Exploit.JS.DirektShow.ap

av2.swf
         Exploit.JS.DirektShow.ao

av3.swf
         Exploit.JS.DirektShow.aq

dd.e2xe
         Trojan-Downloader.Win32.Geral.hxt

x.js_
         Trojan-Downloader.JS.Iframe.buu

[ 本帖最后由 sam.to 于 2009-10-1 12:12 编辑 ]

benq80282

Avira AntiVir
00454.rar
  [0] Archive type: RAR
    --> av1.swf
      [DETECTION] Contains recognition pattern of the HTML/Silly.Gen HTML script virus
    --> dd.e2xe
      [DETECTION] Is the TR/Hijacker.Gen Trojan
    --> x.js
      [DETECTION] Contains recognition pattern of the HTML/Infected.WebPage.Gen HTML script virus
    --> 2.css
      [DETECTION] Contains recognition pattern of the HTML/Silly.Gen HTML script virus
    --> av2.swf
      [DETECTION] Contains suspicious code HEUR/HTML.Malware
    [NOTE]      A backup was created as '4ae48ccc.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!

sam.to

4d385c8c96fca587c67f610a625d1207   av1.swf
463c1898fffb94b5ab1f5f25076dac64   av3.swf
b36ca61cca9efe17a326f1b31d1ee20a   av2.swf
d1651b2dda95a9d1e30315d06b432d63   3.css
c24cdf6cfd435fae4d446766821cab01   2.css
0256cd461a74f4445545147e13d70732   x.js
to kl


Hello,


2.css, 3.css - Exploit.JS.Ssreader.b
av1.swf - Trojan.JS.Agent.aqb
av2.swf - Exploit.JS.Agent.arc
x.js - Trojan.JS.Zapchast.aq

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

av3.swf

No malicious code was found in this file.

[ 本帖最后由 sam.to 于 2009-10-3 22:16 编辑 ]

benq80282

Avira AntiVir
84567.rar
  [0] Archive type: RAR
    --> av1.swf
      [DETECTION] Contains recognition pattern of the HTML/Silly.Gen HTML script virus
    --> x.js
      [DETECTION] Contains recognition pattern of the HTML/Infected.WebPage.Gen HTML script virus
    --> 2.css
      [DETECTION] Contains recognition pattern of the HTML/Silly.Gen HTML script virus
    --> av2.swf
      [DETECTION] Contains suspicious code HEUR/HTML.Malware
    [NOTE]      A backup was created as '4ae4c3c0.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!

sam.to

3D16FEEDC80CB57FFBCA40DD64EF7397
to kl


x.j2s - Trojan-Downloader.JS.Iframe.bvj

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

[ 本帖最后由 sam.to 于 2009-10-2 19:29 编辑 ]

sam.to

29b414f0368b9780028676f27f5eb29b   fff.swf
5e5b0b15d5245b4977e9c322e41eb39b   av1.swf
463c1898fffb94b5ab1f5f25076dac64   av3.swf
b36ca61cca9efe17a326f1b31d1ee20a   av2.swf
8351a9f31194741377fe364bf7ddb4b4   3.css
551071f5118a0bf227106afb9b14d936   2.css
4e6e18d3569e77fe5c067a13edee10a0   iie.swf
76849ae4e5c402a24fb9f71f329e638d   ee.ex2e
to kl

kalynn84

SWF:Downloader-P [Trj]

kalynn84

Win32:Perkesh [Rtk

sam.to

efb76ca5e49282c94c1167d301b7af8d   2.css
8a3316d5c1b10e6d9957b62f9257deea   ee.exe
6565bb511235e249133b7573a3808daa   av1.swf
463c1898fffb94b5ab1f5f25076dac64   av3.swf
b36ca61cca9efe17a326f1b31d1ee20a   av2.swf
7250a36bf7a92ca76a9e6940e3d53810   3.css
35f8e3cc43468481416aafd6f2e66405   x.js
to kl

Hello,

2.css,
3.css - Exploit.JS.Ssreader.b,

av1.swf - Trojan.JS.Agent.aqb,

av2.swf - Exploit.JS.Agent.arc,

ee.e2xe - Worm.Win32.AutoRun.axkk,

x.js_ - Trojan.JS.Zapchast.aq

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

av3.swf

No malicious code was found in this file.

[ 本帖最后由 sam.to 于 2009-10-3 22:16 编辑 ]

sam.to

4e81cedb8deefb9ca2b999fdeeb81d02   x.js
23d6b92bc7eb100fc1294e6b124b7e75   3.css
2ca23f6f803d6138c2fe7b1f6bb9463f   2.css
bbbbfedd0b184d18289ab12939c777bf   ee.ex2e
to kl


Hello,


2.css - Exploit.JS.Ssreader.c
ee.ex2e - Worm.Win32.AutoRun.axmd
x.js - Trojan-Clicker.JS.iframe.b

At the moment these files are detected. Please update your antivirus bases.

3.css

No malicious code was found in this file.

[ 本帖最后由 sam.to 于 2009-10-8 17:37 编辑 ]