123【MD5:53bae5】

显示全部楼层 · 发表于 2007-7-6 22:23:46

小毒

显示全部楼层 · 发表于 2007-7-6 22:25:54

费尔没有反应。

显示全部楼层 · 发表于 2007-7-6 22:27:30

小毒不小...卡巴不报

显示全部楼层 · 发表于 2007-7-6 22:41:15

c:\ABC\123.zip:\123.exe - Signature 'Trojan.Delf.NEB' found
c:\ABC\123.zip

2 Files scanned
(1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.594

显示全部楼层 · 发表于 2007-7-6 22:43:42

Hello,

123.exek - Trojan-PSW.Win32.Gamec.ar

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: 123.zip

显示全部楼层 · 发表于 2007-7-6 22:54:46

[:26:]
Scanned disks, folders and files: F:\123.zip
F:\123.zip ?ZIP ?123.exe - probably a variant of Win32/Genetik trojan

显示全部楼层 · 发表于 2007-7-6 23:04:04

咖啡报了

显示全部楼层 · 发表于 2007-7-6 23:08:29

CreateFile C:\Program Files\Internet Explorer\InfoMs.sys
CreateFile C:\Program Files\Internet Explorer\InfoMs.tdm
Intrusive process: D:\YB\123\123.exe Process ID (PID): 4000 Attempt of process intrusion: C:\WINDOWS\Explorer.EXE Process ID (PID): 488

显示全部楼层 · 发表于 2007-7-6 23:29:40

deleted: Trojan program Trojan-PSW.Win32.Gamec.ar File: C:\Documents and Settings\Owner\×ÀÃæ\123.zip/123.exe//UPX

显示全部楼层 · 发表于 2007-7-6 23:46:15

病毒: Trojan-PSW.Win32.Gamec.ar
文件: 123[1].zip
目录: C:\Documents and Settings\Administrator\Local Settings\Temp\Temporary Internet Files\Content.IE5\GDIFKL4N
进程: GreenBrowser.exe

[病毒样本] 123【MD5:53bae5】

本帖子中包含更多资源

本帖子中包含更多资源