报的不多[MD5: 8068C5]

显示全部楼层 · 发表于 2007-7-17 15:48:27

这个在我的系统中,运行微点没有拦截动作,程序不能正常运行.

显示全部楼层 · 发表于 2007-7-17 16:00:42

Hello,

my-post-card.exe_ - IM-Worm.Win32.VB.bh

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Dmitry Shvetsov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: my-post-card.zip

> ZIP f

显示全部楼层 · 发表于 2007-7-17 16:16:40

deleted: virus IM-Worm.Win32.VB.bh File: C:\Documents and Settings\Owner\×ÀÃæ\my_post_card.zip/my-post-card.exe

显示全部楼层 · 发表于 2007-7-17 17:07:54

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00063274.

We received the following archive files:

File ID	Filename	Size (Byte)	Result
1104723	my_post_card.zip	239.1 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
1104724	my-post-card.exe	496 KB	MALWARE

Please find a detailed report concerning each individual sample below:

Filename

Result

my-post-card.exe

MALWARE

The file 'my-post-card.exe' has been determined to be 'MALWARE'.
Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2007-7-17 20:14:15

nod32 ..

2007-7-17 20:11:21 AMON file C:\WINDOWS\svchost.exe Win32/VB.NMC worm quarantined - deleted Event occurred on a new file created by the application: F:\my_post_card\my-post-card.exe. The file was moved to quarantine. You may close this window.

显示全部楼层 · 发表于 2007-7-17 21:34:39

Starting the file scan:

Begin scan in 'F:\病毒样本\my_post_card.zip'
F:\病毒样本\my_post_card.zip
  [0] Archive type: ZIP
  --> my-post-card.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agen.507904
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-17 22:34:06

Start of the scan: 2007年7月17日  22:33

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\my_post_card.zip'
C:\Documents and Settings\Administrator\桌面\my_post_card.zip
  [0] Archive type: ZIP
  --> my-post-card.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agen.507904

显示全部楼层 · 发表于 2007-7-17 22:35:53

原帖由 tracydk 于 2007-7-17 21:34 发表
Starting the file scan:

Begin scan in 'F:\病毒样本\my_post_card.zip'
F:\病毒样本\my_post_card.zip
  [0] Archive type: ZIP
  --> my-post-card.exe
   [DETECTION] Is the Trojan horse TR/Dr ...

shu ru fa chu wen ti le....

same time,but LS is on my top....

显示全部楼层 · 发表于 2007-7-17 22:42:58

jolin别用norman的沙盘了
detail太少
用sunbelt-software的吧
相当详细

显示全部楼层 · 发表于 2007-7-17 22:47:48

原帖由 scottxzt 于 2007-7-17 15:48 发表
这个在我的系统中,运行微点没有拦截动作,程序不能正常运行.

允许他访问网络就会报杀了吧

[病毒样本] 报的不多[MD5: 8068C5]

红伞可以杀了

本帖子中包含更多资源