[病毒样本] 2

显示全部楼层 · 发表于 2007-11-27 17:04:43

瑞星20.20.10 MISS

显示全部楼层 · 发表于 2007-11-27 17:18:48

检测到：木马程序 Trojan-Clicker.Win32.VB.vs 文件　: F:\du\桌面.rar/gdisvc.exe//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-Downloader.Win32.Satray.ak 文件　: F:\du\桌面.rar/top.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2007-11-27 17:33:48

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\GDISVC.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\SYSTEM\SERV.EXE
2) C:\WINDOWS\SYSTEM32\COM\SERVICES.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\TOP.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\SYSTEM.DAT
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-11-27 17:48:46

Hello,

gdisvc.exed - Trojan-Clicker.Win32.VB.vs,
top.exed - Trojan-Downloader.Win32.Satray.ak

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Denis Maslennikov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2007-11-27 18:05:04

avast 报 Win32:Agent-LLW [Trj]

显示全部楼层 · 发表于 2007-11-27 18:54:02

RX20.20.11未杀。

显示全部楼层 · 发表于 2007-11-27 23:35:51

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 985
Paranoia Database - 49147
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\gdisvc.exe - Suspected MaliciousScope:GENERIC.MALWARE.1
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\top.exe - Suspected TROJAN-PSW.ONLINEGAMES.2

2 Files scanned
0 Infected files found
2 Suspected files found
0 Files disinfected
0 Files deleted