3只 [MD5: D276F3 E12566 479964]

Nerazzurri

Hello,

001.dll, sys.exe_, sysn.dll - Backdoor.Win32.Delf.cfy

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Alexander Romanenko
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

秋叶濛濛

Starting the file scan:

Begin scan in 'F:\Virus\样本.rar'
F:\Virus\样本.rar
  [0] Archive type: RAR
  --> 001.dll
      [DETECTION] Is the Trojan horse TR/Delf.18944
  --> sys.exe
      [DETECTION] Is the Trojan horse TR/Delf.18944
  --> sysn.dll
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!


End of the scan: 2007年11月16日  14:35
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
      4 Files were scanned
      3 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Backdoor.Win32.Remote.c  

用户来源：互联网

软件版本：20.18.40

HC303

毒霸也只杀一个。

zfznbic

小a报三个木马。。。

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Backdoor.Win32.Remote.c  

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.18.41

欠妳緈諨

D:\病毒测试\未解压样本\样本.rar » RAR » sys.exe - probably a variant of Win32/Genetik trojan
D:\病毒测试\未解压样本\样本.rar » RAR » sysn.dll - probably a variant of Win32/Genetik trojan

傻猪猪米走鸡

2007-11-16 23:22:22        Real-time file system protection        file        D:\firefox下载的文件\样本(4)\sysn.dll        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: f:\Program Files\WinRAR\WinRAR.exe.
2007-11-16 23:22:18        Real-time file system protection        file        D:\firefox下载的文件\样本(4)\sys.exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: f:\Program Files\WinRAR\WinRAR.exe.

tun

>>> Virus 'Mal/Behav-053' found in file C:\Scan\1.rar\001.dll
>>> Virus 'Mal/Behav-001' found in file C:\Scan\1.rar\sys.exe\FILE:0000
>>> Virus 'Mal/Behav-053' found in file C:\Scan\1.rar\sys.exe\FILE:0001
>>> File "C:\Scan\1.rar\sys.exe" has been identified as suspicious 'Sus/Dropper-R'.
>>> Virus 'Mal/Behav-001' found in file C:\Scan\1.rar\sysn.dll

1 file swept in 11 seconds.
4 viruses were discovered.
1 suspicious file was discovered.
1 file out of 1 was infected.
Please send infected samples to Sophos for analysis.
For advice consult www.sophos.com, email support@sophos.com
or telephone +44 1235 559933
Ending Sophos Anti-Virus.

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 878
Paranoia Database - 48756
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\001.dll - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\sys.exe - Infected WIN32.BACKDOOR.PROSTI.1 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\sysn.dll - Infected WIN32.BACKDOOR.PROSTI.1 - Deleted

3 Files scanned
2 Infected files found
0 Suspected files found
0 Files disinfected
2 Files deleted