一个样本，没有图标

SONGBOWEN

一个没有图标的病毒

Graybird

Starting the file scan:

Begin scan in 'E:\windates.rar'
E:\windates.rar
  [0] Archive type: RAR
  --> windates.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was deleted!

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Agent.zzj

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.18.62

SONGBOWEN

小红伞的回复：
Filename Result
windates.exe  UNDER ANALYSIS

The file 'windates.exe' has been determined to be 'UNDER ANALYSIS'.

我是小菜鸟

今天的卡巴，pass，pass，哈哈。。。。。

sam.to

Kis7.0.0.125找不到,已上报

sam.to

Hello,

windates.exe_ - Trojan-Downloader.Win32.Agent.ffi

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Alexander Romanenko
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.


hotmail出现问题,一个email发了三次

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 939
Paranoia Database - 48881
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\windates.exe

C:\Documents and Settings\Uhthn\Desktop\windates.exe - Suspected TROJAN-DOWNLOADER (HTTP://...)

1 Files scanned
0 Infected files found
1 Suspected files found
0 Files disinfected
0 Files deleted

googlehack

是个downloader，图标是一块白

SONGBOWEN

小红伞的分析结果：
The file 'windates.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Gendal.32768.1. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.00.227. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.