好久没发样本了，来一个只有几个杀软报的

显示全部楼层 · 发表于 2007-11-30 11:35:43

更新看看

显示全部楼层 · 发表于 2007-11-30 11:51:27

已经最新了。。看来更新换代了。。。

显示全部楼层 · 发表于 2007-11-30 12:27:00

蠕虫名称:Worm.Win32.Agent.eok

程序:
C:\DOCUMENTS AND SETTINGS\DELL\LOCAL SETTINGS\TEMP\RAR$EX00.170\LUCKY1009.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-11-30 12:33:42

两天前的病毒库
卡巴都可以阻止

显示全部楼层 · 发表于 2007-11-30 13:12:39

原帖由 kato9096 于 2007-11-30 11:30 发表

已解毒: 特洛伊木馬程式 Trojan-Clicker.Win32.Agent.oa 檔案: C:\Documents and Settings\kato9096\桌面\164108.zip/lucky1009.exe//#/live.dll

虽然已杀毒,但我开启后也报毒,所以上报

Hello,

lucky1009.exe_ - Trojan-Dropper.Win32.Agent.cuo

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Dmitry Shvetsov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2007-11-30 13:45:27

C:\Documents and Settings\Administrator\桌面\lucky1009.zip » ZIP » lucky1009.exe - probably a variant of Win32/Agent.ABE trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\lucky1009.zip - probably a variant of Win32/Agent.ABE trojan - deleted - quarantined

显示全部楼层 · 发表于 2007-11-30 15:15:59

原帖由 yimike 于 2007-11-30 11:14 发表
cab解压后就得到这些总的来说衍生物就是这些
AntiVir全杀！

Hello,

live.sys - Rootkit.Win32.Agent.po

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

ll2t.dll - Trojan.Win32.BHO.aax

This file is already dete
cted. Please update your antivirus bases.

Please quote all when answering.

--
Best regards, Dmitry Shvetsov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2007-11-30 15:55:15

The file 'lucky1009.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Drop.Agent.cuo. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.01.26.

显示全部楼层 · 发表于 2007-11-30 16:02:04

Starting the file scan:

Begin scan in 'E:\lucky1009.zip'
E:\lucky1009.zip
  [0] Archive type: ZIP
  --> lucky1009.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.cuo
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-30 18:39:04

EQ2发的一般ESS都报

[病毒样本] 好久没发样本了，来一个只有几个杀软报的

回复 8楼 458506 的帖子

回复 18楼 Graybird 的帖子

浏览过的版块