E-mail 2X

显示全部楼层 · 发表于 2009-12-5 15:54:26

To KL

显示全部楼层 · 发表于 2009-12-5 16:02:43

程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\E WORM (2).EXE
木马程序生成以下文件：
1) C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\C\WINDOWS\TEMP\_EX-68.EXE
2) C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\USER\ALL\APPLICATION DATA\71224622\71224622.EXE
3) C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\C\WINDOWS\TEMP\_EX-08.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2009-12-5 16:04:27

to eset

显示全部楼层 · 发表于 2009-12-5 16:13:59

卡巴miss

显示全部楼层 · 发表于 2009-12-5 16:28:37

avira miss

显示全部楼层 · 发表于 2009-12-5 16:37:17

本帖最后由 will 于 2009-12-5 16:38 编辑

MSE检出一个: TrojanDownloader:Win32/Waledac.C
Avast Miss...

显示全部楼层 · 发表于 2009-12-5 19:29:18

We received the following archive files:
File ID    Filename Size (Byte) Result
25511771    Desktop.rar 19.72 KB OK

A listing of files contained inside archives alongside their results can be found below:
File ID    Filename Size (Byte) Result
25511772    E worm.exe    18.5 KB    UNDER ANALYSIS
25511773    E worm (2).exe    18 KB    UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:
Filename Result
E worm.exe    UNDER ANALYSIS

The file 'E worm.exe' has been determined to be 'UNDER ANALYSIS'.
Filename Result
E worm (2).exe    UNDER ANALYSIS

The file 'E worm (2).exe' has been determined to be 'UNDER ANALYSIS'.
Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

显示全部楼层 · 发表于 2009-12-5 19:44:08

微点

显示全部楼层 · 发表于 2009-12-5 19:46:56

to kl

显示全部楼层 · 发表于 2009-12-5 19:50:43

回复 9# 悠柚
卡巴现在还没回复。。。

[病毒样本] E-mail 2X

本帖子中包含更多资源

本帖子中包含更多资源