继续挖，貌似没几个报的[MD5: E0E564 E36398]

promised

C:\ABC\XQDBHO.rar:\XQDBHO5.exe - 特征码 'Trojan-Downloader.Win32.Banload.dku' 被发现
C:\ABC\XQDBHO.rar:\XQDBHO.dll - 特征码 'Trojan-Downloader.Win32.Delf.cxq' 被发现
C:\ABC\XQDBHO.rar

[ 本帖最后由 promised 于 2007-11-16 11:32 编辑 ]

Nerazzurri

deleted: Trojan program Trojan-Downloader.Win32.Delf.cxq        File: C:\Users\Jack Jones\Desktop\XQDBHO.rar/XQDBHO.dll//PE_Patch.UPX//UPX

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\XQDBHO.rar'
C:\Users\morgan\Documents\
  XQDBHO.rar
    [0] Archive type: RAR
    --> XQDBHO5.exe
        [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> XQDBHO.dll
        [DETECTION] Is the Trojan horse TR/Dldr.Delf.cxq
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

zfznbic

小a报木马。。呵呵

wangjay1980

这回终于找到他妈了，上次只有DLL

promised

http://www.99999999999.com.cn/XQDBHO5.exe

Nerazzurri

Hello,

XQDBHO5.exe_ - Trojan-Downloader.Win32.Delf.cyr

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: XQDBHO.rar

秋叶濛濛

Begin scan in 'F:\Virus\XQDBHO.rar'
F:\Virus\XQDBHO.rar
  [0] Archive type: RAR
  --> XQDBHO5.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> XQDBHO.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.cxq
      [INFO]      The file was deleted!

mofunzone

原帖由 wangjay1980 于 2007-11-15 20:26 发表
这回终于找到他妈了，上次只有DLL

看来卡巴暂时没有通过儿子推断出妈妈的能力

qigang

RX20.18.41是还没报。。