nod32过的7个.

显示全部楼层 · 发表于 2007-7-7 22:45:44

two ..

[Scan path] C:\Documents and Settings\Administrator\桌面\temp\sys15.exe
>>C:\Documents and Settings\Administrator\桌面\temp\sys15.exe\data001 is an adware program Adware.Borlander
C:\Documents and Settings\Administrator\桌面\temp\sys15.exe - archive contains infected objects

[Scan path] C:\Documents and Settings\Administrator\桌面\temp\sys12.exe
>C:\Documents and Settings\Administrator\桌面\temp\sys12.exe infected with Trojan.Resun.origin

显示全部楼层 · 发表于 2007-7-7 23:27:17

郁闷．
金山是不是只对国内的毒．

显示全部楼层 · 发表于 2007-7-8 00:58:44

KV2007杀掉2个。

显示全部楼层 · 发表于 2007-7-8 07:00:05

3个活的
9 12 15

显示全部楼层 · 发表于 2007-7-8 08:11:58

temp.rar
  [0] Archive type: RAR
  --> sys.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.3191
  --> sys12.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.bto.7
  --> sys15.exe
   [DETECTION] Contains signature of the dropper DR/Agent.S.3
  --> sys2.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> sys4.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.AUP.196
  --> sys9.exe
   [DETECTION] Is the Trojan horse TR/Hook.Shell.139

显示全部楼层 · 发表于 2007-7-8 08:53:54

Hello,

sys.exek - Trojan-PSW.Win32.OnLineGames.es,
sys12.exek - Trojan-Downloader.Win32.Agent.bto,
sys9.exek - Trojan-Spy.Win32.Delf.uv

These files are already detected. Please update your antivirus bases.

sys14.exek

No malicious code was found in this file.

sys15.exek - not-a-virus:AdWare.Win32.Agent.s

This file is an Advertizing Tool, it is detected by
extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

sys2.exek, sys4.exek

These files are corrupted.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: temp7.zip

[病毒样本] nod32过的7个.