老远捡来的[MD5: 9783B9 87212B FF7401 ED26E1 B2D934]

显示全部楼层 · 发表于 2007-8-22 09:54:15

[MD5: 9783B9 87212B FF7401 ED26E1 B2D934]

显示全部楼层 · 发表于 2007-8-22 09:57:56

Scan performed at: 2007-8-22 9:57:23
Scanning Log
NOD32 version 2474 (20070822) NT
Command line: C:\Documents and Settings\Don johnson\桌面\5s.zip
Operating memory - is OK

Date: 22.8.2007 Time: 09:57:27
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\5s.zip
C:\Documents and Settings\Don johnson\桌面\5s.zip ?ZIP ?msntsrv.exe - Win32/TrojanDownloader.Nurech.NBG trojan - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\5s.zip ?ZIP ?msntsrv(1).exe - Win32/Agent.NGQ trojan - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\5s.zip ?ZIP ?msntsrv(2).exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Don johnson\桌面\5s.zip ?ZIP ?msntsrv(3).exe - Win32/PSW.LdPinch.NEL trojan - was a part of the deleted object
Number of scanned files: 6
Number of threats found: 4
Number of files cleaned: 1
Time of completion: 09:57:30 Total scanning time: 3 sec (00:00:03)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-8-22 09:59:32

Begin scan in 'C:\Documents and Settings\Administrator\桌面\5s.zip'
C:\Documents and Settings\Administrator\桌面\5s.zip
  [0] Archive type: ZIP
  --> 282.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> msntsrv.exe
   [DETECTION] Contains signature of the worm WORM/Zhelatin.Gen
  --> msntsrv(1).exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> msntsrv(2).exe
   [DETECTION] Contains suspicious code HEUR/Crypted
  --> msntsrv(3).exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
   [WARNING]  The file was ignored!

显示全部楼层 · 发表于 2007-8-22 10:01:22

来自美利坚合众国？

Hello,

282.exe_ - Backdoor.Win32.IRCBot.adg,
msntsrv(1).exe_ - Trojan-Downloader.Win32.Obfuscated.ca,
msntsrv(2).exe_ - Trojan-Spy.Win32.Banker.crq,
msntsrv(3).exe_ - Trojan-PSW.Win32.LdPinch.cej

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Namestnikov Yury
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: 5s.zip

[ 本帖最后由 wangjay1980 于 2007-8-22 11:18 编辑 ]

显示全部楼层 · 发表于 2007-8-22 10:20:36

已删除: 木马程序 Trojan.Win32.Small.or 文件: F:\v\5s.zip/msntsrv.exe

显示全部楼层 · 发表于 2007-8-22 10:27:58

已感染: 特洛伊木马程式 Trojan.Win32.Small.or C:\ls\msntsrv.exe 35.6 KB

显示全部楼层 · 发表于 2007-8-22 10:30:35

Start of the scan: 2007年8月22日  10:29

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\5s.zip
  [0] Archive type: ZIP
  --> 282.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> msntsrv.exe
   [DETECTION] Contains signature of the worm WORM/Zhelatin.Gen
  --> msntsrv(1).exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> msntsrv(2).exe
   [DETECTION] Contains suspicious code HEUR/Crypted
  --> msntsrv(3).exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
   [INFO]    The file was deleted!

End of the scan: 2007年8月22日  10:30
Used time: 00:15 min

The scan has been done completely.

   1 Scanning directories
   6 Files were scanned
   5 viruses and/or unwanted programs were found
   1 classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-8-22 10:36:48

282.exe

AntiVir       7.4.1.63       2007.08.21       TR/Rootkit.Gen
CAT-QuickHeal       9.00       2007.08.21       (Suspicious) - DNAScan
eSafe       7.0.15.0       2007.08.20       Suspicious Trojan/Worm
McAfee       5102       2007.08.21       New Malware.aj
Norman       5.80.02       2007.08.21       W32/Suspicious_U.gen
Panda       9.0.0.4       2007.08.21       Suspicious file
Sophos       4.20.0       2007.08.21       Mal/Packer
Sunbelt       2.2.907.0       2007.08.22       VIPRE.Suspicious
Webwasher-Gateway       6.0.1       2007.08.22       Trojan.Rootkit.Gen

显示全部楼层 · 发表于 2007-8-22 10:40:08

显示全部楼层 · 发表于 2007-8-22 10:48:16

msntsrv(1).exe

AntiVir 7.4.1.63 2007.08.21 TR/Crypt.XPACK.Gen
CAT-QuickHeal 9.00 2007.08.21 (Suspicious) - DNAScan
DrWeb 4.33 2007.08.21 Trojan.MulDrop.8347
eSafe 7.0.15.0 2007.08.20 Suspicious Trojan/Worm
NOD32v2 2474 2007.08.22 Win32/Agent.NGQ
Panda 9.0.0.4 2007.08.21 Suspicious file
Prevx1 V2 2007.08.22 Generic.Malware
Webwasher-Gateway 6.0.1 2007.08.22 Trojan.Crypt.XPACK.Gen

[病毒样本] 老远捡来的[MD5: 9783B9 87212B FF7401 ED26E1 B2D934]

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块