几个最新样本 + 几个比较旧 37 个 网马

wangjay1980

Hello,

1246+CDB7F793.exe_, 587+moon[1].exe_, 8d072[1].exe_, AUTO.exe_, CDB7F793.exe_ - Backdoor.Win32.Agent.bxj,
DISKMAN32.dll1 - Trojan-PSW.Win32.OnLineGames.dwn,
DISKMAN32.exe_, K11911259362.exe_ - Trojan-PSW.Win32.OnLineGames.dwa

These files are already detected. Please update your antivirus bases.

5814+cq0619[1].exe_ - Trojan-PSW.Win32.Lmir.bmx,
DBGHLP32.dll1 - Trojan-PSW.Win32.Nilage.bql,
DBGHLP32.exe_, K119112595013.exe_ - Trojan-PSW.Win32.Nilage.bqm,
K11911259351.exe_ - Trojan-PSW.Win32.OnLineGames.dwv,
K11911259373.exe_, KVSC3.dll1, KVSC3.exe_ - Trojan-PSW.Win32.OnLineGames.dwt,
K11911259405.exe_, MPPDS.exe_ - Trojan-PSW.Win32.WOW.yr,
K11911259438.exe_, MSPRINT32D.dll1, MSPRINT32D.exe_ - Trojan-PSW.Win32.Nilage.bqn,
K11911259459.exe_ - Trojan-PSW.Win32.Nilage.bqo,
K119112594711.exe_ - Trojan-PSW.Win32.OnLineGames.dwu

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

autorun.inf

No malicious code was found in this file.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

ykz1991

ykz1991

OSS能升级啦

碧水寒潭

Start of the scan: 2007年9月30日  21:45

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\virus[1].part1.rar
  [0] Archive type: RAR
  --> virus\2007Äê9ÔÂ30ÈÕ12ʱ12·Ö46ÃëCDB7F793.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus\2007Äê9ÔÂ30ÈÕ12ʱ58·Ö12Ãëcs0619[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> virus\2007Äê9ÔÂ30ÈÕ12ʱ58·Ö14Ãëcq0619[1].exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> virus\2007Äê9ÔÂ30ÈÕ12ʱ58·Ö15Ãëf2b4657b5568d072[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus\2007Äê9ÔÂ30ÈÕ12ʱ58·Ö5Ãëzt0616[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dmn
  --> virus\2007Äê9ÔÂ30ÈÕ12ʱ58·Ö7Ãëmoon[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus\2007Äê9ÔÂ30ÈÕ12ʱ58·Ö9Ãëwm[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\AUTO.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus\CDB7F793.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus\DBGHLP32.DLL
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\DBGHLP32.EXE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> virus\DISKMAN32.DLL
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\DISKMAN32.EXE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> virus\K11911259351.EXE
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> virus\K11911259362.EXE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> virus\K11911259373.EXE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> virus\K11911259394.EXE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> virus\K11911259405.EXE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> virus\K11911259416.EXE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> virus\K11911259427.EXE
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dgi.3
  --> virus\K11911259438.EXE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> virus\K11911259459.EXE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> virus\K119112594610.EXE
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dmn
  --> virus\K119112594711.EXE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
H:\AV-TEST\virus[1].part2.rar
  [0] Archive type: RAR
  --> virus\K119112595114.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> virus\K119112595215.EXE
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\KVSC3.DLL
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\KVSC3.EXE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> virus\LYLOADER.EXE
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> virus\MPPDS.EXE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> virus\MSPRINT32D.DLL
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\MSPRINT32D.EXE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> virus\NVDISPDRV.DLL
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dgi.3
  --> virus\NVDISPDRV.EXE
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dgi.3
  --> virus\PROVIE.EXE
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年9月30日  21:45
Used time: 00:27 min

The scan has been done completely.

      1 Scanning directories
     38 Files were scanned
     29 viruses and/or unwanted programs were found
      6 Files were classified as suspicious:
      2 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      9 Files not concerned
      2 Archives were scanned
      0 Warnings
      0 Notes

woai_jolin

Status          Operation has failed
Target          G:\v\virus
                         Options
                                            , Requested action: Repair, Excluded extensions disabled,
                         Excluded objects disabled, Heuristics enabled, Sandbox enabled, Scan
                         archives

         Statistics          Details

                                             Files               Boot sectorsRegistry key

                         Scanned              37                       0                         0
                          Infected              34                       0                         0
                         Repaired               0                        0                         0
                        Renamed              34                        -                          -
                     Quarantined              0                         -                          -
                            Deleted              0                         -                         0