这是什么？

显示全部楼层 · 发表于 2007-12-22 17:17:21

Hello,

64.exe - Trojan-Dropper.Win32.Mudrop.fy

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: 64.rar

[ 本帖最后由无尽藏海于 2007-12-22 17:27 编辑 ]

显示全部楼层 · 发表于 2007-12-22 17:25:08

哎呀...肯定是个病毒...

生成物爆多就不说了...疯狂调用浏览器打开一个网页...还有个 sb 下载器下载类似 av-killer 的东西...

逼得我直接重启了

显示全部楼层 · 发表于 2007-12-22 17:26:46

你不会实机测试吧……
佩服……

显示全部楼层 · 发表于 2007-12-22 17:28:13

原帖由 无尽藏海 于 2007-12-22 17:26 发表
你不会实机测试吧……
佩服……

沙盘而已...正好前面测试那个所谓 ring3 穿影子的... 所以 returnil 也没关...

不过沙盘里发作起来也受不了了...直接重启了所以

显示全部楼层 · 发表于 2007-12-22 18:20:43

上报

显示全部楼层 · 发表于 2007-12-22 18:27:40

Start of the scan: 2007年12月22日  18:26

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\64.rar'

End of the scan: 2007年12月22日  18:26
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   0 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-22 18:49:09

显示全部楼层 · 发表于 2007-12-22 20:17:21

以前没有这个病毒啊，我浏览的网站都是固定的那些，以前用kav+za没关系啊，难道说nod32+comodo不行么？虽然我知道一个病毒并不能说明什么问题，但是心理真的很难接受。这个文件现在还经常跳出来呢，就算是comodo选上"记住我的选择"也没用。

[病毒样本] 这是什么？

回复 12楼挪威的冬天的帖子

本帖子中包含更多资源

[病毒样本] 这是什么？

回复 12楼 挪威的冬天 的帖子

本帖子中包含更多资源

回复 12楼挪威的冬天的帖子