Win32:Small-IKO [Trj]

显示全部楼层 · 发表于 2008-1-28 19:32:31

上报給卡巴．．

显示全部楼层 · 发表于 2008-1-28 21:02:59

Hello,

setup000.exe - Trojan.Win32.Small.aba

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-1-28 21:35:59

原帖由 ballakay 于 2008-1-28 19:07 发表
FS 挂!已上报!

FS系统控制拦截！FS不止有扫描引擎，还有主防和沙盘。。。

显示全部楼层 · 发表于 2008-1-28 21:38:23

显示全部楼层 · 发表于 2008-1-28 21:49:58

对象: setup000.exe\[UPX]
在压缩档案里: D:\Documents\桌面\setup000.rar
状态: 已发现病毒
病毒: Win32:Small-IKO [Trj] (AVAST! 引擎)
对象: setup000.rar
路径: D:\Documents\桌面
状态: 已发现病毒
病毒: Win32:Small-IKO [Trj] (AVAST! 引擎)
分析完成: 2008-1-28 21:49
已扫描 1 个文件
已发现 1 个染毒文件
发现 0 个可疑文件

显示全部楼层 · 发表于 2008-1-28 22:45:03

Scan Log
Version of virus signature database: 2828 (20080128)
Date: 2008-1-28 Time: 22:44:29
Scanned disks, folders and files: D:\Personal\My Documents\桌面\setup000.rar
D:\Personal\My Documents\桌面\setup000.rar » RAR » setup000.exe - Win32/TrojanDownloader.Zlob.BOL trojan - was a part of the deleted object
Number of scanned objects: 2
Number of threats found: 1
Time of completion: 22:44:30 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2008-1-28 22:52:55

F-PROT pass

显示全部楼层 · 发表于 2008-1-28 23:27:01

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\setup000.rar'
C:\Documents and Settings\Administrator\My Documents\
  setup000.rar
  setup000.rar:Zone.Identifier
[0] Archive type: RAR
--> setup000.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.SW
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-1-29 11:19:40

微点砍掉

显示全部楼层 · 发表于 2008-1-29 11:47:05

扫描进行于：2008-1-29 11:45:54
扫描日志
NOD32版本 2830 (20080129) NT
命令行： C:\Documents and Settings\ccty\桌面\setup000.rar

日期： 29.1.2008 时间：11:45:55
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\ccty\桌面\setup000.rar
C:\Documents and Settings\ccty\桌面\setup000.rar >>RAR >>setup000.exe - Win32/TrojanDownloader.Zlob.BOL 木马
已扫描的文件数目：1
已发现的病毒数目：1
完成时间： 11:45:55 总扫描时间：0 秒 (00:00:00)

[病毒样本] Win32:Small-IKO [Trj]

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块