[病毒样本] 5x

显示全部楼层 · 发表于 2010-7-8 14:12:58

V5

显示全部楼层 · 发表于 2010-7-8 14:16:43

ess 清空（其中有两个是启发，已经上报）

http://bbs.kafan.cn/forum.php?mo ... zg1Njk3MDZ8NDAxODAz 多个威胁连接中断 - 已隔离通过应用程序访问 web 时检测到威胁: E:\谷歌浏览器\chrome.exe.
http://bbs.kafan.cn/forum.php?mo ... zg1Njk3MDZ8NDAxODAz > RAR > SBIE\31b63997.dll 可能是 Win32/PSW.OnLineGames.OYL 特洛伊木马的变种
http://bbs.kafan.cn/forum.php?mo ... zg1Njk3MDZ8NDAxODAz > RAR > SBIE\ksuser.dll Win32/PSW.OnLineGames.OVB 特洛伊木马的变种
http://bbs.kafan.cn/forum.php?mo ... zg1Njk3MDZ8NDAxODAz > RAR > SBIE\msvcr.dll 可能是 Win32/PSW.OnLineGames.OYL 特洛伊木马的变种
http://bbs.kafan.cn/forum.php?mo ... zg1Njk3MDZ8NDAxODAz > RAR > SBIE\msg9.bin Win32/PSW.OnLineGames.PMH 特洛伊木马的变种
http://bbs.kafan.cn/forum.php?mo ... zg1Njk3MDZ8NDAxODAz > RAR > SBIE\msgD.bin Win32/PSW.OnLineGames.PMH 特洛伊木马的变种

显示全部楼层 · 发表于 2010-7-8 14:34:28

金山毒霸杀！

显示全部楼层 · 发表于 2010-7-8 14:43:43

ess漏一个
SBIE\ksuser.dll

显示全部楼层 · 发表于 2010-7-8 14:45:21

瑞星全杀

显示全部楼层 · 发表于 2010-7-8 14:45:54

本帖最后由 sam.to 于 2010.7.8 14:50 编辑

未报的已上报kl(报0个),ll(报3个)

comodo清空

Hello,

This message is generated by automatic letter reception system. The report contains information on what the verdicts on the files (if any in the letter) makes antivirus with latest updates. Letter will be passed to the virus analyst.

31b63997.dll - Trojan-GameThief.Win32.WOW.aavx
ksuser.dll - Trojan-GameThief.Win32.Frethoq.akr
msg9.bin - Trojan-PSW.Win32.Kykymber.hqz
msgD.bin - Trojan-PSW.Win32.Kykymber.hra

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

msvcr.dll - not-a-virus:RemoteAdmin.Win32.NetCat.yx

New potentially risk software was found in this file. It's detection will be included in the next update. Thank you for your help.

Best Regards, Kaspersky Lab

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2010-7-8 15:33:59

2010-7-8 15:34:27 HTTP 过滤器文件 http://bbs.kafan.cn/forum.php?mo ... zg1NzM5NjV8MjY4MjA2 多个威胁连接中断 - 已隔离 2C6C70049F97497\Administrator 通过应用程序访问 web 时检测到威胁: C:\Program Files\Internet Explorer\iexplore.exe.

显示全部楼层 · 发表于 2010-7-8 15:34:16

http://bbs.kafan.cn/forum.php?mo ... zg1NzM5NjV8MjY4MjA2 多个威胁连接中断 - 已隔离通过应用程序访问 web 时检测到威胁: C:\Program Files\Internet Explorer\iexplore.exe.
http://bbs.kafan.cn/forum.php?mo ... zg1NzM5NjV8MjY4MjA2 > RAR > SBIE\31b63997.dll 可能是 Win32/PSW.OnLineGames.OYL 特洛伊木马的变种
http://bbs.kafan.cn/forum.php?mo ... zg1NzM5NjV8MjY4MjA2 > RAR > SBIE\ksuser.dll Win32/PSW.OnLineGames.OVB 特洛伊木马的变种
http://bbs.kafan.cn/forum.php?mo ... zg1NzM5NjV8MjY4MjA2 > RAR > SBIE\msvcr.dll 可能是 Win32/PSW.OnLineGames.OYL 特洛伊木马的变种
http://bbs.kafan.cn/forum.php?mo ... zg1NzM5NjV8MjY4MjA2 > RAR > SBIE\msg9.bin Win32/PSW.OnLineGames.PMH 特洛伊木马的变种
http://bbs.kafan.cn/forum.php?mo ... zg1NzM5NjV8MjY4MjA2 > RAR > SBIE\msgD.bin Win32/PSW.OnLineGames.PMH 特洛伊木马的变种

显示全部楼层 · 发表于 2010-7-8 16:11:39

to xandora(panda)

显示全部楼层 · 发表于 2010-7-8 16:15:11

to 360

[病毒样本] 5x

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源