【可疑文档】四个

显示全部楼层 · 发表于 2007-11-27 14:18:26

Hello,

inudhya.dll - Trojan.Win32.Delf.ams,
mydf071120.dll - Trojan-Downloader.Win32.Delf.dch

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

svchost.exe, SYSTEM128.VXD

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2007-11-27 15:51:42

辛苦

显示全部楼层 · 发表于 2007-11-27 16:56:36

瑞星0个，毒霸报1个，红伞0个。

显示全部楼层 · 发表于 2007-11-27 18:56:35

RX20.20.11不杀。

显示全部楼层 · 发表于 2007-11-28 11:44:06

可疑啊！怎么报的那么少呢？

显示全部楼层 · 发表于 2007-11-28 11:46:10

Starting the file scan:

Begin scan in 'E:\Copy.zip'
E:\Copy.zip
  [0] Archive type: ZIP
  --> mydf071120.dll
   [DETECTION] Is the Trojan horse TR/Delf.27136
  --> inudhya.dll
   [DETECTION] Is the Trojan horse TR/Delf.bag
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-28 11:49:56

D:\Download\VirusScan\Copy.zip:<ZIP>\mydf071120.dll : is suspected of Backdoor.XiaoBird.25 (paranoid heuristics)

显示全部楼层 · 发表于 2007-11-28 11:52:44

>>> File "D:\Download\VirusScan\Copy.zip\mydf071120.dll" has been identified as suspicious 'Sus/Behav-113'.
>>> File "D:\Download\VirusScan\Copy.zip\inudhya.dll" has been identified as suspicious 'Sus/Madcode-A'.

显示全部楼层 · 发表于 2007-11-28 12:26:18

D:\Download\VirusScan\Copy.zip:\SYSTEM128.VXD
D:\Download\VirusScan\Copy.zip:\mydf071120.dll - Signature 'Trojan-Downloader.Win32.Delf.dch' found
D:\Download\VirusScan\Copy.zip:\svchost.exe
D:\Download\VirusScan\Copy.zip:\inudhya.dll - Signature 'Trojan.Win32.Delf.ams' found
D:\Download\VirusScan\Copy.zip

5 Files scanned
(1 Archiv with 4 files)
2 Signatures found
0 Suspect code-parts found
Used time: 0:00.140

[病毒样本] 【可疑文档】四个

回复 11楼 kato9096 的帖子

回复 4楼 Graybird 的帖子