手上有一個類似的SAMPLE
這檔案是從 已中毒之電腦拿出來的!
目前已上傳給 Symantec
回報為
filename: sample.rar
machine: Machine
result: See the developer notes
filename: msmacro32.exe
machine: Machine
result: See the developer notes
filename: 8043fd.exe
machine: Machine
result: See the developer notes
filename: dllcache.exe
machine: Machine
result: This file is detected as Trojan.Dropper.
http://www.symantec.com/avcenter/ven...n.dropper.html
filename: msvcrt2.dll
machine: Machine
result: See the developer notes
filename: 05.scr
machine: Machine
result: This file is detected as Trojan.Dropper.
http://www.symantec.com/avcenter/ven...n.dropper.html