pcibus

显示全部楼层 · 发表于 2007-11-21 19:07:08

C:\1.rar\gane 771.exe - infected with Win32.HLLW.Rubbish.origin

Archive contains an infected item

DRWEB 4.44

显示全部楼层 · 发表于 2007-11-21 19:28:28

Hello.
Worm.Win32.Downloader.bf
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Yury Nesmachny
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

> Attachment: 159668.rar

显示全部楼层 · 发表于 2007-11-21 19:36:39

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Dropper.Win32.Agent.yqp

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.19.21

显示全部楼层 · 发表于 2007-11-21 21:19:06

deleted: virus Worm.Win32.Downloader.bf File: C:\Documents and Settings\Owner\×ÀÃæ\1.rar/gane 771.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2007-11-21 23:32:26

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 940
Paranoia Database - 48881
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\gane 771.exe

C:\Documents and Settings\Uhthn\Desktop\gane 771.exe - Suspected TROJAN-PSW.ONLINEGAMES.2

1 Files scanned
0 Infected files found
1 Suspected files found
0 Files disinfected
0 Files deleted

显示全部楼层 · 发表于 2007-11-21 23:59:18

Starting the file scan:

Begin scan in 'F:\Virus\1.rar'
F:\Virus\1.rar
  [0] Archive type: RAR
  --> gane 771.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.45056
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-22 01:55:42

Roboon：程序:
D:\我的文档\桌面\GANE 771.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\DRIVERS\PCIBUS.SYS
是否删除木马程序及其衍生物?

[病毒样本] pcibus

3/1