promo.exe(高质量-第1901-1920次更新6440X)

显示全部楼层 · 发表于 2009-3-19 19:32:40

本帖最后由 Sherry.ai 于 2010-6-8 18:14 编辑

Zlob's friend

显示全部楼层 · 发表于 2009-3-19 19:35:40

'TR/Crypt.FKM.Gen' [trojan]

显示全部楼层 · 发表于 2009-3-19 19:36:25

VB found nothing

显示全部楼层 · 发表于 2009-3-19 20:45:39

McAfee miss

显示全部楼层 · 发表于 2009-3-19 20:50:49

Begin scan in 'C:\Users\Kitman\Desktop\p+s'
C:\Users\Kitman\Desktop\p+s\promo.exe
[DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
[NOTE]    A backup was created as '4a313fd3.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\Kitman\Desktop\p+s\svc.exe
[DETECTION] Is the TR/Crypt.FKM.Gen Trojan
[NOTE]    A backup was created as '4a253fd7.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-3-19 20:55:14

微点杀

程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\P+S\PROMO.EXE
被删除文件：
C:\WINDOWS\SYSTEM32\USERINIT.EXE
是否阻止文件被删除?
程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\P+S\PROMO.EXE
是否删除木马程序及其衍生物?
程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\P+S\SVC.EXE
木马程序生成以下文件：
1) C:\WINDOWS\SYSTEM32\SVCHOSTW.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2009-3-19 21:05:36

Virus: Win32:Vupa [Cryp] (2x) (Engine B)

Virus beim Laden von Web-Inhalten gefunden.

Adresse: bbs.kafan.cn

显示全部楼层 · 发表于 2009-3-19 22:16:50

ik:Trojan.Crypt

显示全部楼层 · 发表于 2009-3-19 22:52:31

To KL

显示全部楼层 · 发表于 2009-3-19 23:00:33

Hello,

promo.exe_

No malicious code was found in this file.

svc.exe_ - Trojan-Downloader.Win32.Small.jks

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Regards, Andrey Ladikov
Virus Analyst, Kaspersky Lab.

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

[病毒样本] promo.exe(高质量-第1901-1920次更新6440X)

本帖子中包含更多资源

评分