又是KillFile..没有杀软认识

醉一生爱妍

原帖由 solcroft 于 2008-1-27 20:02 发表

服了你

啊啊說錯。。

忘記SSM沒有FD了

wangjay1980

detected: Trojan program Trojan.Win32.KillWin.dz        URL: http://bbs.kafan.cn/attachment.php?aid=191130//360rpt.exe

hlx98007

卡巴已报detected: Trojan program Trojan.Win32.KillWin.dz        File: C:\virus\360rpt.rar/360rpt.exe

zwl2828

C:\Users\Wesley\Downloads\360rpt.rar
  [0] Archive type: RAR
  --> 360rpt.exe
      [DETECTION] Is the Trojan horse TR/Killwin.DZ

sam.to

的确是一个很新的病毒

28654621

Attempt to delete file C:\boot.ini
Attempt to delete file C:\ntldr
Attempt to open process C:\Windows\system32\ctfmon.exe



文件 360rpt.rar 接收于 2008.01.28 01:20:55 (CET)反病毒引擎        版本        最后更新        扫描结果
AhnLab-V3        -        -        -
AntiVir        -        -        TR/Killwin.DZ
Authentium        -        -        -
Avast        -        -        -
AVG        -        -        -
BitDefender        -        -        -
CAT-QuickHeal        -        -        -
ClamAV        -        -        -
DrWeb        -        -        -
eSafe        -        -        -
eTrust-Vet        -        -        -
Ewido        -        -        -
FileAdvisor        -        -        -
Fortinet        -        -        -
F-Prot        -        -        -
Ikarus        -        -        -
Kaspersky        -        -        Trojan.Win32.KillWin.dz
McAfee        -        -        -
Microsoft        -        -        -
NOD32v2        -        -        -
Norman        -        -        -
Panda        -        -        -
Prevx1        -        -        Heuristic: Suspicious Self Modifying File
Rising        -        -        -
Sophos        -        -        -
Sunbelt        -        -        -
Symantec        -        -        -
TheHacker        -        -        -
VBA32        -        -        -
VirusBuster        -        -        -
Webwasher-Gateway        -        -        Trojan.Killwin.DZ

附加信息
MD5: 483c01e1ea70535125e98a4ffce6f407
SHA1: 2f96c681a69db98169c8277470d9a9be1d785877
SHA256: 34d9f585c1f3cc151598bf27b394f8c57c9fe4be23c051f3c3070151110e8120
SHA512: 5dd0720c33b96e76f1c4e46152832eb2ad08115b0a3a3a953f98e64133379980 f8612213b4065fc5548251495b62ce96a84f91d46670370c006b454c6ff51b6b

[ 本帖最后由 28654621 于 2008-1-28 11:35 编辑 ]

clovedsm

又是个垃圾新病毒，，传播能力也不高……反正中的人电脑直接崩溃

clovedsm

Submission details: Submission received: 28 January 2008, 13:18:33 Processing time: 3 min 53 sec Submitted sample: File MD5: 0x483C01E1EA70535125E98A4FFCE6F407 Filesize: 25,430 bytes File System Modifications

• The following files were created in the system:

#	Filename(s)	File Size	File MD5
1	%Temp%\360rpt.exe	77,824 bytes	0x325A265BCD3904C12360EECD62893323
2	[file and pathname of the sample #1]	25,430 bytes	0x483C01E1EA70535125E98A4FFCE6F407

• Note:
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).

• The following files were deleted:
  • c:\boot.ini
  • c:\ntldr

Memory Modifications

• There was a new process created in the system:

Process Name	Process Filename	Main Module Size
360rpt.exe	%Temp%\360rpt.exe	77,824 bytes

Other details

• Analysis of the file resources indicate the following possible country of origin:

China

• To mark the presence in the system, the following Mutex object was created:
  • 360safeupload_mutex

xlys

对象: 360rpt.exe
        在压缩档案里: D:\Documents\桌面\360rpt.rar
        状态: 已发现病毒
        病毒: Trojan.Win32.KillWin.dz (KAV 引擎)
对象: 360rpt.rar
        路径: D:\Documents\桌面
        状态: 已发现病毒
        病毒: Trojan.Win32.KillWin.dz (KAV 引擎)
分析完成: 2008-1-28 13:46
    已扫描 1 个文件
    已发现 1 个染毒文件
    发现 0 个可疑文件

黄金马甲出租

有人故意陷害360，真缺德，最看不起这种人了