popwin

promised

[startpage]
startpage=0
url=http://www.sina.com.cn
[favorites]
favorites=1
title1=想要听歌
url1=http://www.31tg.com
title2=UU500音乐
url2=http://www.uu500.com
title3=休闲小游戏
url3=http://www.yx07.com
title4=免费电影
url4=http://www.511u.com
title5=外挂下载
url5=http://www.18wg.com
title6=要上MTV
url6=http://www.13mtv.com
title7=免费手机铃声
url7=http://www.uu500.com/sms
title8=音乐视听
url8=http://www.yysong.com
title9=免费送Q币
url9=http://60.191.233.35:88/www.qq.com
count=9
[desktop]
desktop=1
title1=音乐
url1=http://www.31tg.com
ico1=http://www.31tg.com/imusic.ico
title2=免费电影
url2=http://www.511u.com
ico2=http://www.31tg.com/imovie.ico
title3=免费铃声下载
url3=http://www.uu500.com/sms
ico3=http://www.31tg.com/iting.ico
count=3
[popwina]
popwina=1
count=1
url1=http://61.139.37.23:88/
[popwinb]
popwinb=0
count=0
[im]
im=0
msg=你好啊，兄弟！http://www.sina.com.cn|sd|f|sd|f|sd|f
qq=0
[file]
file=1
file1=http://u.uu500.com/a8da234k8asdf.exe
filename1=jdsthu1.exe
file2=http://ad.uu500.com/3d226f621b4a032c.exe
filename2=jdsthu2.exe
count=2
[keyname]
keyname=0
count=0
[keytitle]
keytitle=1
title1=听歌
url1=http://www.31tg.com
title2=10qq
url2=http://www.uu500.com
title3=ok168
url3=http://www.10uu.com
title4=外挂网
url4=http://www.18wg.com
title5=5583
url5=http://www.87mtv.com
title6=点卡
url6=http://www.23card.com
title7=音乐
url7=http://www.31tg.com
title8=送Q币
url8=http://60.191.233.35:88/www.qq.com
title9=电影
url9=http://www.511u.com
title10=交友
url10=http://www.uu500.com/asia/
count=10
[keytitle2]
keytitle2=0
count=0
[qqfile]
qqfile=0
count=0
[count]
count=0
mecount=0
url=http://127.0.0.1/count/count.asp

Graybird

Starting the file scan:

Begin scan in 'E:\x.zip'
E:\x.zip
  [0] Archive type: ZIP
  --> 3d226f621b4a032c.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> a8da234k8asdf.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      The file was deleted!

sam.to

kis7不报，已上报

gbz55

gogo8989

这次咖啡露脸了，

FS没报，主防挡住

sam.to

Hello,

3d226f621b4a032c.exek - Trojan-Downloader.Win32.VB.bvp,
a8da234k8asdf.exek - Trojan-Downloader.Win32.Small.gxe

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

残缺的唯美

G:\Users\Administrator\Desktop\x.zip » ZIP » 3d226f621b4a032c.exe - a variant of Win32/Agent.NEO trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\x.zip » ZIP » a8da234k8asdf.exe - a variant of Win32/TrojanDownloader.Flux trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\x.zip - multiple threats - deleted - quarantined

qigang

RX20.20.52未杀。

lmzlll

蠕虫名称:Worm.Win32.Agent.eox

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TEST\X\3D226F621B4A032C.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?


木马名称:Trojan-Downloader.Win32.Flux.gu

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TEST\X\A8DA234K8ASDF.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

Oceanzd

AVAST! 报

[ 本帖最后由 Oceanzd 于 2007-12-1 23:51 编辑 ]