在来供现一下病毒.卡巴反映无 呵呵

jianfox

Antivirus	Version	Last Update	Result
AhnLab-V3	2007.12.14.10	2007.12.13	-
AntiVir	7.6.0.45	2007.12.13	-
Authentium	4.93.8	2007.12.13	-
Avast	4.7.1098.0	2007.12.13	-
AVG	7.5.0.503	2007.12.13	Downloader.Generic6.YCB
BitDefender	7.2	2007.12.14	-
CAT-QuickHeal	9.00	2007.12.13	-
ClamAV	0.91.2	2007.12.14	-
DrWeb	4.44.0.09170	2007.12.13	-
eSafe	7.0.15.0	2007.12.13	-
eTrust-Vet	31.3.5374	2007.12.13	-
Ewido	4.0	2007.12.13	-
FileAdvisor	1	2007.12.14	-
Fortinet	3.14.0.0	2007.12.14	-
F-Prot	4.4.2.54	2007.12.13	W32/Downloader.D.gen!Eldorado
F-Secure	6.70.13030.0	2007.12.14	W32/Downloader
Ikarus	T3.1.1.15	2007.12.14	Virus.Win32.Agent.IWX
Kaspersky	7.0.0.125	2007.12.14	-
McAfee	5185	2007.12.13	StartPage-JU.dldr.gen
Microsoft	1.3109	2007.12.14	-
NOD32v2	2722	2007.12.14	-
Norman	5.80.02	2007.12.13	-
Panda	9.0.0.4	2007.12.14	Suspicious file
Prevx1	V2	2007.12.14	Heuristic: Suspicious Self Modifying File
Rising	20.22.40.00	2007.12.14	Trojan.DL.Win32.Mnless.in
Sophos	4.24.0	2007.12.14	-
Sunbelt	2.2.907.0	2007.12.14	-
Symantec	10	2007.12.14	-
TheHacker	6.2.9.159	2007.12.14	-
VBA32	3.12.2.5	2007.12.14	-
VirusBuster	4.3.26:9	2007.12.13	-
Webwasher-Gateway	6.6.2	2007.12.14	- 另外招集有办法对付这个病毒的方法,目前会能杀的几乎杀不掉!

Love=卡巴+费尔

两文件为同一文件，费尔动态拦截。

伊の星

过小红伞

绅博周幸

Suspicious Files and Miscellaneous Uploads

Thank you for your submission. Below you can see the current status of the uploaded files.


--------------------------------------------------------------------------------


We received the following archive files:



File ID  Filename  Size (Byte) Result
3599494  新建文件夹.rar 4.3 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
3599482  my_70364.exe  24 KB  UNDER ANALYSIS


Please find a detailed report concerning each individual sample below:

Filename Result
my_70364.exe  UNDER ANALYSIS

The file 'my_70364.exe' has been determined to be 'UNDER ANALYSIS'.


--------------------------------------------------------------------------------
Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

库洛洛

The file 'my_70364[1].exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Small.fch. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

antivir回复~

绅博周幸

红伞分析师5分钟搞定

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00106455.




We received the following archive files:


File ID  Filename  Size (Byte) Result
3599494  ?????.rar 4.3 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
3599482  my_70364.exe  24 KB  MALWARE


Please find a detailed report concerning each individual sample below:

Filename Result
my_70364.exe  MALWARE

The file 'my_70364.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Small.fch. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Alternatively you can see the analysis result here:
http://analysis.avira.com/sample ... p;incidentid=106455

An overview of all your submissions can be found here:
http://analysis.avira.com/sample ... QyG9BMrVk2I3WJD9Gyp


Please note: The detection of Spy/Adware is not available in the product "AntiVir PersonalEdition Classic". Please address specific questions to support@avira.com

leonfg

居然有一个卡巴查不出FS查出了 多引擎终于能见出点效果呵呵
PS；这个是沙盘报的 右键扫描同样扫不出

scottxzt

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹\MY_70364.EXE
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹\MY_70364[1].EXE
是否阻止该进程继续运行?

scottxzt

危险进程(PID:1596): C:\WINDOWS\tempaq

Joker

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=168387 is infected with Heur.Downloader virus