image.exe (199,201,203 楼有新)

显示全部楼层 · 发表于 2010-8-4 22:36:41

本帖最后由 sam.to 于 2010.8.5 11:45 编辑

A05EEB2C6F4CB5140F12B97D53054CAB
to kl,ll,mcafee,comodo,eset

http://samples.nod32.com.hk/index.php?a=query〈=2&md5=a05eeb2c6f4cb5140f12b97d53054cab

Hello,

image.exe$ - Backdoor.Win32.Koutodoor.ati

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

-------------------------------------------
Regards, Ivan Kargapoltsev.
Virus analyst , Kaspersky Lab.

显示全部楼层 · 发表于 2010-8-4 23:07:39

UGuard 7 扫描日志
扫描在 0 秒内结束，扫描对象共计 6 个。

H:\temp\tv99\za\733947-201\image2.exe -> Heur.Koutodoor.Gen
H:\temp\tv99\za\733947-201\image3.exe -> Heur.Koutodoor.Gen
H:\temp\tv99\za\733947-201\image.exe -> Heur.Koutodoor.Gen
H:\temp\tv99\za\733947-201\image4.exe -> Heur.Koutodoor.Gen
H:\temp\tv99\za\733947-201\image(1).exe -> Heur.Koutodoor.Gen

共计 5 个威胁，日志结束。

显示全部楼层 · 发表于 2010-8-5 12:21:14

本帖最后由 sam.to 于 2010.8.5 12:51 编辑

6A437D0F42B7F6AA364194091757A595

to kl,ll,eset

http://samples.nod32.com.hk/index.php?a=query〈=2&md5=6a437d0f42b7f6aa364194091757a595

Hello,

image.ex4e - Backdoor.Win32.Koutodoor.ats

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

-------------------------------------------
Regards, Ivan Kargapoltsev.
Virus analyst , Kaspersky Lab.

显示全部楼层 · 发表于 2010-8-5 21:34:05

203
费尔杀

显示全部楼层 · 发表于 2010-8-6 08:55:33

203 to xandora(panda)

显示全部楼层 · 发表于 2010-8-6 09:21:21

201,203 to dw

显示全部楼层 · 发表于 2010-8-6 09:27:20

回复 203楼 sam.to 的帖子

to kingsoft
But Kingsoft Antivirus cannot definited it,but ...

文件上报成功
上报号：6a437d0f42b7f6aa364194091757a595

样本名称：image.exe

文件MD5：6a437d0f42b7f6aa364194091757a595

鉴定结果：危险

[病毒样本] image.exe (199,201,203 楼有新)