[病毒样本] 1

显示全部楼层 · 发表于 2007-11-11 23:50:24

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\auto.rar'
C:\Documents and Settings\Administrator\桌面\auto.rar
  [0] Archive type: RAR
  --> auto.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-11 23:55:16

kis 7找不到

显示全部楼层 · 发表于 2007-11-12 00:14:19

Hello,

auto.exek - Virus.Win32.AutoRun.acg

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

這是卡巴的回覆，意思是文件的確有病毒！會在下一次更新中把病毒掃出來！

显示全部楼层 · 发表于 2007-11-12 00:24:30

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 850
Paranoia Database - 48663
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\auto.exe

C:\Documents and Settings\Uhthn\Desktop\auto.exe - Infected BACKDOOR.AGENT.9 - Deleted

1 Files scanned
1 Infected files found
0 Suspected files found
0 Files disinfected
1 Files deleted

显示全部楼层 · 发表于 2007-11-12 00:25:08

反应真快~~~~

显示全部楼层 · 发表于 2007-11-12 00:29:18

Dear sam sam,

We have analyzed your submission.  The following is a report of our
findings for each file you have submitted:

filename:  auto.exe
machine: Machine
result: This file is detected as W32.Popwin.

Developer notes:
auto.exe is non-repairable threat. Please delete this file and replace it if necessary. Please follow the instruction at the end of this email message to install the latest available definitions.

norton 給我的回覆，他說文件有W32.Popwin.

显示全部楼层 · 发表于 2007-11-12 00:37:23

AVAST报，最近小A表现越来越好了

显示全部楼层 · 发表于 2007-11-12 01:42:21

原帖由 cy6266812 于 2007-11-12 00:37 发表
AVAST报，最近小A表现越来越好了

赛门铁克表现也不错

。

显示全部楼层 · 发表于 2007-11-12 02:11:44

扫描进行于：2007-11-11 19:11:27
扫描日志
NOD32版本 2652 (20071111) NT
命令行： D:\下载文件夹\auto.rar

日期： 11.11.2007 时间：19:11:33
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：D:\下载文件夹\auto.rar
D:\下载文件夹\auto.rar >>RAR >>auto.exe - Win32/TrojanDownloader.Flux 木马的变种
已扫描的文件数目：2
已发现的病毒数目：1
已清除病毒的文件数目：1
完成时间： 19:11:33 总扫描时间：0 秒 (00:00:00)

[病毒样本] 1

本帖子中包含更多资源

本帖子中包含更多资源