Be careful spread on QQ 1407.rar/my photos. EXE/Trojan-PSW.Win32.Delf.agh/worm.win32.pabug.cn
EndurerOriginal
2007-11-02 No.2Supplement the reply from rising
2007-11-02 No.1Version
Qq received information:
/---
Www. f ** DGA * ea.org.cn/1407.rarhere is my photo to help me remember it. Oh, click it to download it.
---/
Kaspersky report during download:
/---
Detected: TrojanProgram Trojan-PSW.Win32.Delf.aghURL: hxxp: // www. f ** DGA * ea.org.cn/1407.rar/my photo .exe/upx
---/
The "My photos. EXE" icon in the 1407. rar file may be misunderstood as an image ......
File Description: D:/test/my photo. exe
Attribute: ---
An error occurred while obtaining the file version information!
Creation Time:
Modification time:
Access time:
Size: 34994 bytes, 34.178 KB
MD5: 692d005c8e4ffc2f415d266a99b821f8
Sha1: 6f47d7ad7845a0b5f909e6be97ceb26cc6a03cdd
CRC32: 4da3fc0d
It can be seen that this file was generated at today and is relatively new ......
Subject: |
Virus report email analysis result-flow Ticket No.: 20071102131329888541 |
Sender: |
"" <Send@rising.net.cn> |
Sent at: 2007.11.02 |
Dear customer!
Your email has been received. Thank you for your support for rising.
We have analyzed your problems and files in detail. The following are the analysis results of the files you uploaded:
1. File Name: My photo. exe
Virus Name:Worm.win32.pabug.cn
The virus file you reported will be processed and resolved in version 16.41 of Rising Star 2008 (19 .46.41 of Rising Star 2007.
Note: if the file you reported is damaged or the compressed package is password-protected, we cannot correctly analyze the file. Please confirm that the file is normal and there is no password in the compressed package before submitting it.
if you have any questions, you can contact us at the mail service center to describe your problem in detail, and provide the flow ticket number in the subject of the email and the email address used for reporting.