某贴挖的，貌似刷流量[MD5: 23BB09 ADA392]

显示全部楼层 · 发表于 2007-11-25 16:18:43

C:\ABC\NetRunTime.exe
C:\ABC\NetRunTime.exe\FILE:0000
>>> Virus 'Mal/Behav-156' found in file C:\ABC\NetRunTime.exe
C:\ABC\ah\NetRunTime.exe - 特征码 'BehavesLikeWin32.Malware' 被发现

显示全部楼层 · 发表于 2007-11-25 16:20:12

Starting the file scan:

Begin scan in 'E:\样本.rar'
E:\样本.rar
  [0] Archive type: RAR
  --> NetRunTime.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-25 16:20:44

ESS过

显示全部楼层 · 发表于 2007-11-25 16:22:06

每次我都抢不到沙发,郁闷

显示全部楼层 · 发表于 2007-11-25 16:24:54

其实就是“ 一个超级坏蛋过卡吧瑞星 NOD32 11.25 病毒库 ”里的病毒运行后生成的

显示全部楼层 · 发表于 2007-11-25 16:36:06

kis 7查不到

显示全部楼层 · 发表于 2007-11-25 16:50:32

kis7不报，已上报

今天卡巴回复很慢

[ 本帖最后由 kato9096 于 2007-11-25 16:51 编辑 ]

显示全部楼层 · 发表于 2007-11-25 16:56:36

哪个装了HIPS看看有啥动作？
MS只有进程产生
哪个WINDOWSTIME

显示全部楼层 · 发表于 2007-11-25 18:40:27

Hello,

NetRunTime.exe_, windowsime.exe_ - Trojan-Spy.Win32.Delf.art

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Namestnikov Yury
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2007-11-25 18:51:56

RX20.19.62未报毒。。

[病毒样本] 某贴挖的，貌似刷流量[MD5: 23BB09 ADA392]

本帖子中包含更多资源