瑞星

显示全部楼层 · 发表于 2007-11-7 14:56:13

就一个联网动作?

显示全部楼层 · 发表于 2007-11-7 15:04:34

运行之后的事情....

显示全部楼层 · 发表于 2007-11-7 15:10:37

文件 my_70302.rar 接收于 2007.11.07 08:02:46 (CET)

反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2007.11.7.0	2007.11.07	-
AntiVir	7.6.0.30	2007.11.06	-
Authentium	4.93.8	2007.11.05	-
Avast	4.7.1074.0	2007.11.06	-
AVG	7.5.0.503	2007.11.06	Downloader.Generic6.QYE
BitDefender	7.2	2007.11.07	-
CAT-QuickHeal	9.00	2007.11.06	-
ClamAV	0.91.2	2007.11.07	-
DrWeb	4.44.0.09170	2007.11.06	-
eSafe	7.0.15.0	2007.11.06	-
eTrust-Vet	31.2.5276	2007.11.07	-
Ewido	4.0	2007.11.06	-
FileAdvisor	1	2007.11.07	-
Fortinet	3.11.0.0	2007.10.19	-
F-Prot	4.4.2.54	2007.11.07	W32/Downloader.D.gen!Eldorado
F-Secure	6.70.13030.0	2007.11.07	W32/Downloader.GTY
Ikarus	T3.1.1.12	2007.11.07	Trojan-Downloader.Win32.QQHelper.va
Kaspersky	7.0.0.125	2007.11.07	-
McAfee	5157	2007.11.06	-
Microsoft	1.3007	2007.11.07	-
NOD32v2	2642	2007.11.06	-
Norman	5.80.02	2007.11.06	-
Panda	9.0.0.4	2007.11.06	Suspicious file
Prevx1	V2	2007.11.07	Heuristic: Suspicious Self Modifying File
Rising	20.17.20.00	2007.11.07	Trojan.DL.Win32.Agent.zul
Sophos	4.23.0	2007.11.07	-
Sunbelt	2.2.907.0	2007.11.06	-
Symantec	10	2007.11.07	Downloader
TheHacker	6.2.9.118	2007.11.06	-
VBA32	3.12.2.4	2007.11.06	-
VirusBuster	4.3.26:9	2007.11.06	-
Webwasher-Gateway	6.0.1	2007.11.06	-

显示全部楼层 · 发表于 2007-11-7 15:27:11

Hello.
New malicious software was found in the attached file. Trojan-Downloader.Win32.Small.gmz
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Maslennikov Denis
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

> Attachment: my_70302.rar

显示全部楼层 · 发表于 2007-11-7 15:46:45

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\MY_70302.EXE
是否阻止该进程继续运行?

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\MY_70302.EXE
是否删除病毒程序及其衍生物?

显示全部楼层 · 发表于 2007-11-7 18:49:23

ESS过了

显示全部楼层 · 发表于 2007-11-7 20:26:26

C:\my_70302.rar\my_70302.exe - infected with Trojan.Click.4791

DRWEB 4.44

显示全部楼层 · 发表于 2007-11-7 21:12:07

Begin scan in 'D:\XIAOHAO\my_70302.rar'
D:\XIAOHAO\my_70302.rar
  [0] Archive type: RAR
  --> my_70302.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Small.gmz
   [INFO]    The file was renamed to 'my_70302.rar.VIR'!

显示全部楼层 · 发表于 2007-11-7 21:25:32

deleted: Trojan program Trojan-Downloader.Win32.Small.gmz File: C:\Documents and Settings\Deric Yeoh\×ÀÃæ\°²È«ÖÐÐÄ\my_70302.rar/my_70302.exe

[病毒样本] 瑞星

本帖子中包含更多资源

本帖子中包含更多资源