最新磁碟机变种…

显示全部楼层 · 发表于 2008-1-15 15:16:32

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Ermilov Maxim
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2008-1-15 15:16:44

好变态的磁碟机变种，直接让电脑重启！！！

显示全部楼层 · 发表于 2008-1-15 15:21:29

卡巴5个~

显示全部楼层 · 发表于 2008-1-15 15:30:15

都上报拉

显示全部楼层 · 发表于 2008-1-15 15:33:13

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Worm.Win32.DiskGen.ca

用户来源：互联网

软件版本：20.27.10

显示全部楼层 · 发表于 2008-1-15 15:54:29

C:\Sample\Xorer.zip:\Xorer\ramifications\alg.exe - 启发式引擎探测到威胁 (Level: 90)
C:\Sample\Xorer.zip:\Xorer\ramifications\AntiTool.exe - 特征码引擎探测到 'Trojan-PWS.Win32.OnLineGames.mix' 威胁
C:\Sample\Xorer.zip:\Xorer\ramifications\dnsq.dll
C:\Sample\Xorer.zip:\Xorer\ramifications\lsass.exe - 特征码引擎探测到 'Virus.Win32.Agent.PPS' 威胁
C:\Sample\Xorer.zip:\Xorer\ramifications\netcfg.000 - 特征码引擎探测到 'Virus.Win32.Xorer.dd' 威胁
C:\Sample\Xorer.zip:\Xorer\ramifications\netcfg.dll - 特征码引擎探测到 'Virus.Win32.Xorer.dd' 威胁
C:\Sample\Xorer.zip:\Xorer\ramifications\smss.exe - 启发式引擎探测到威胁 (Level: 90)
C:\Sample\Xorer.zip:\Xorer\Sample\pagefile.pif - 特征码引擎探测到 'Virus.Win32.Agent.PPS' 威胁
C:\Sample\Xorer.zip

9 个文件已扫描
(1 个压缩包共 8 个文件)
5 个病毒文件
2 个未知威胁
扫描用时: 0:00.734

显示全部楼层 · 发表于 2008-1-15 16:31:50

微点报了未知木马

显示全部楼层 · 发表于 2008-1-15 16:53:12

Starting the file scan:

Begin scan in 'E:\Xorer.zip'
E:\Xorer.zip
  [0] Archive type: ZIP
  --> Xorer/ramifications/AntiTool.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.Mix.2
  --> Xorer/ramifications/dnsq.dll
   [DETECTION] Is the Trojan horse TR/Fujacks.A.2
  --> Xorer/ramifications/lsass.exe
   [DETECTION] Is the Trojan horse TR/Fujacks.A.1
  --> Xorer/ramifications/netcfg.000
   [DETECTION] Is the Trojan horse TR/Xorer.G
  --> Xorer/ramifications/netcfg.dll
   [DETECTION] Is the Trojan horse TR/Xorer.G
  --> Xorer/ramifications/smss.exe
   [DETECTION] Is the Trojan horse TR/Xorer.E.2
  --> Xorer/Sample/pagefile.pif
   [DETECTION] Is the Trojan horse TR/Fujacks.A.1
   [INFO]    The file was deleted!

The file 'alg.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Xorer.E. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2008-1-15 17:10:06

显示全部楼层 · 发表于 2008-1-15 19:57:12

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Worm.Win32.DiskGen.ca

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.27.12

[病毒样本] 最新磁碟机变种…

回复 5楼 Graybird 的帖子

本帖子中包含更多资源

32/2

浏览过的版块