b8db71

显示全部楼层 · 发表于 2007-7-14 11:27:25

detected: virus Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\LfWNblU.rar/LfWNblU.com

显示全部楼层 · 发表于 2007-7-14 11:31:49

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\LfWNblU.rar'
C:\Documents and Settings\Administrator\桌面\
  LfWNblU.rar
[0] Archive type: RAR
--> LfWNblU.com
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '46ef4409.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-14 11:31:55

norman pass

显示全部楼层 · 发表于 2007-7-14 11:35:52

Scanning Log
NOD32 version 2398 (20070714) NT
Command line: C:\Documents and Settings\Administrator\ ?
?桌面\LfWNblU.rar
Checking CRC of NOD32.EXE: Status OK
Scanning memory: Not performed (option disabled)
Error occurred while scanning MBR sector of the 2.  ?
?physical disk. Error reading sector.
Error occurred while scanning MBR sector of the 3.  ?
?physical disk. Error reading sector.
Date: 14.7.2007  Time: 11:35:43
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and  ?
?Settings\Administrator\桌面\LfWNblU.rar
C:\Documents and Settings\Administrator\桌面\LfWNblU.rar  ?
??RAR ?LfWNblU.com - probably unknown NewHeur_PE virus [7]
Number of scanned files: 1
Number of threats found: 1
Time of completion: 11:35:43 Total scanning time: 0 sec  ?
?(00:00:00)
Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-7-14 11:36:31

【蜘蛛】
LfWNblU.rar\LfWNblU.com;D:\病毒测试区\LfWNblU.rar;BackDoor.Wowish.origin;;
LfWNblU.rar;D:\病毒测试区;档案文件已被病毒感染;;
【ＮＯＤ３２】D:\病毒测试区\LfWNblU.rar ?RAR ?LfWNblU.com - 未知的 NewHeur_PE 病毒 [7]
【ＭＣＡＦＥＥ】ｐａｓｓ

显示全部楼层 · 发表于 2007-7-14 12:22:18

卡巴斯基反病毒7.0个人版
The requested URL http://bbs.kafan.cn/attachment.php?aid=100716 is infected with Trojan.Generic virus

显示全部楼层 · 发表于 2007-7-14 12:24:33

Starting the file scan:

Begin scan in 'F:\病毒样本\LfWNblU.rar'
F:\病毒样本\LfWNblU.rar
  [0] Archive type: RAR
  --> LfWNblU.com
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-14 12:29:18

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update as Trojan-Downloader.Win32.Small.dwp. Thank you for your help.
-----------------
Regards, Yury Nesmachny
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

> Attachment: LfWNblU.rar

显示全部楼层 · 发表于 2007-7-14 12:31:22

[病毒样本] b8db71

本帖子中包含更多资源

本帖子中包含更多资源