[MD5: 68A889]

显示全部楼层 · 发表于 2007-7-9 13:26:20

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> jxj.css
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-9 13:26:38

detected: virus Downloader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/jxj.css//RLPack

显示全部楼层 · 发表于 2007-7-9 13:27:31

Heuri.Possible/Packed
费尔

显示全部楼层 · 发表于 2007-7-9 13:27:57

费尔启发。

显示全部楼层 · 发表于 2007-7-9 13:35:07

c:\ABC\样本.rar:\jxj.css - Suspect code-parts found (Level: 105)
c:\ABC\样本.rar

2 Files scanned
(1 Archiv with 1 file)
0 Signatures found
1 Suspect code-part found
Used time: 0:00.265

显示全部楼层 · 发表于 2007-7-9 14:02:17

AVAST miss

显示全部楼层 · 发表于 2007-7-9 15:20:02

Hello,

jxj.cssd - Virus.Win32.AutoRun.el

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Denis Maslennikov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2007-7-9 15:28:41

Scan performed at: 2007-7-9 15:28:23
Scanning Log
NOD32 version 2384 (20070708) NT
Command line: C:\Documents and Settings\EQ2\桌面\样本.rar
Operating memory - is OK

Date: 9.7.2007 Time: 15:28:29
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\样本.rar
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?jxj.css - probably a variant of Win32/PSW.QQPass.VD trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 15:28:29 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-9 15:30:28

广告程序,AVG在查杀木马和广告,风险程序厉害点外,病毒和虫子病毒不见得!

[病毒样本] [MD5: 68A889]

本帖子中包含更多资源