[MD5: DD3F1D 23667B 66CD1C]

显示全部楼层 · 发表于 2007-7-1 23:35:04

Hello,

ma.exey - Trojan-PSW.Win32.Agent.mf

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Boris Yampolsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: ??ma.zip

显示全部楼层 · 发表于 2007-7-1 23:37:42

原帖由 hj5abc 于 2007-7-1 23:33 发表

晕.偶也运行了.也.是一片
可恶的UUSee.强奸了偶的CPU.
一打开explorer就开始下载..NOD32开始狂弹红框框.

关了explorer就没事了
防火墙也不是吃素的
不过要是没有returnil
真的要清毒
还真是麻烦

显示全部楼层 · 发表于 2007-7-2 00:04:31

偶用的是XP墙.强吧

还好我开了影子,没事.

ps,你不是睡觉了吗 .晕偶也困了 Time to go to BED.

显示全部楼层 · 发表于 2007-7-2 00:58:35

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\样本.zip'
C:\Documents and Settings\Administrator\My Documents\
  样本.zip
[0] Archive type: ZIP
--> 3024.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/IEHlpr.E.26
      [WARNING] Infected files in archives cannot be repaired!
--> bind_50361.exe
      [DETECTION] Is the Trojan horse TR/Agent.24576.139
      [WARNING] Infected files in archives cannot be repaired!
--> ma.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-2 06:24:20

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.

DeepScan:Generic.PWS.WoW.082C49E4
Trojan.Downloader.Small.AACA
Trojan.Spy.Agent.NDW

显示全部楼层 · 发表于 2007-7-2 07:12:58

Starting the file scan:

Begin scan in 'F:\病毒样本\样本.zip'
F:\病毒样本\样本.zip
  [0] Archive type: ZIP
  --> bind_50361.exe
   [DETECTION] Is the Trojan horse TR/Agent.24576.139
  --> ma.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-2 08:31:21

上报上报

显示全部楼层 · 发表于 2007-7-2 10:08:39

诺顿直接在压缩包里清除了

内部[c:\documents and settings\administrator\桌面\virus样本\3.zip]
风险类别: 广告软件
整体风险影响: 中
性能: 0
隐私: 1183342076
单击以了解有关该风险的更多信息: Adware.AllSum
采取的操作: 完全删除

[MD5: DD3F1D 23667B 66CD1C]

回复 #12 风野胤的帖子

浏览过的版块

[MD5: DD3F1D 23667B 66CD1C]

回复 #12 风野胤 的帖子

浏览过的版块

回复 #12 风野胤的帖子