6个挂着的毒[MD5: A1A675 65E43D 2EFA6A 968CD3 2156E3 E50A25]

显示全部楼层 · 发表于 2007-7-7 20:28:49

c:\ABC\样本.rar:\45.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
c:\ABC\样本.rar:\70.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
c:\ABC\样本.rar:\mapi.js
c:\ABC\样本.rar:\1.exe - Signature 'MalwareScope.Worm.Viking.5' found
c:\ABC\样本.rar:\go.exe - Signature 'Trojan-PWS.Win32.QQPass.pb' found
c:\ABC\样本.rar:\1(1).exe - Signature 'BehavesLikeWin32.ExplorerHijack' found
c:\ABC\样本.rar
7 Files scanned
(1 Archiv with 6 files)
5 Signatures found
0 Suspect code-parts found
Used time: 0:00.110
这个到底是技术盗窃还是什么

显示全部楼层 · 发表于 2007-7-7 21:16:53

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.IMMSG.Win32.TBMSG.ha
病毒： Trojan.DL.JS.Agent.lig
病毒： Worm.Win32.Viking.viv
病毒： Trojan.DL.Win32.Delf.yqo

用户来源：互联网

软件版本：19.30.52

显示全部楼层 · 发表于 2007-7-7 21:18:15

Starting the file scan:

Begin scan in 'F:\病毒样本\样本.rar'
F:\病毒样本\样本.rar
  [0] Archive type: RAR
  --> 45.exe
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.ahj.649 Backdoor server programs
  --> 70.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
  --> 1.exe
   [DETECTION] Is the Trojan horse TR/PSW.Delf.AF.2
  --> go.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delf.bko.4
  --> 1(1).exe
   [DETECTION] Is the Trojan horse TR/Hijack.Explor.3651
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-8 00:17:49

Hello,

1(1).exe_ - Trojan-Downloader.Win32.Agent.bwg,

70.exe_ - Backdoor.Win32.Agent.ahj,

mapi.js_ - Trojan-Downloader.JS.Agent.kn

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Dmitry Shvetsov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2007-7-8 08:24:38

样本.rar
  [0] Archive type: RAR
  --> 45.exe
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.ahj.649 Backdoor server programs
  --> 70.exe
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.ahj.652 Backdoor server programs
  --> 1.exe
   [DETECTION] Is the Trojan horse TR/PSW.Delf.AF.2
  --> go.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delf.bko.4
  --> 1(1).exe
   [DETECTION] Is the Trojan horse TR/Hijack.Explor.3651

[病毒样本] 6个挂着的毒[MD5: A1A675 65E43D 2EFA6A 968CD3 2156E3 E50A25]