AVAST PASS

qianwenxiang

昨天一毒生成的

wolffshen

FS 2008-01-28_02 过

sam.to

卡巴又不报，上报，，

wangjay1980

搞定
Hello,

A7F46ED0.EXE, CA61E828.DLL - Backdoor.Win32.Popwin.awk,

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 wangjay1980 于 2008-1-28 23:50 编辑 ]

鱼是一只我

江民 那个dll文件没杀

The EQs

SYSTEM32.rar » RAR » A7F46ED0.EXE - probably a variant of Win32/Genetik trojan

taiw_1144

发现未知间谍软件，是否删除？
程序:
C:\DOCUMENTS AND SETTINGS\WO\LOCAL SETTINGS\TEMP\RAR$EX00.906\A7F46ED0.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\5973C111.EXE
2) C:\WINDOWS\SYSTEM32\1E291DEA.DLL
是否删除木马程序及其衍生物?

发现间谍软件

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\WO\LOCAL SETTINGS\TEMP\RAR$DI00.032\CA61E828.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

[ 本帖最后由 taiw_1144 于 2008-1-28 23:08 编辑 ]

NobleT

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2008-1-28, 23:07:03
---------------------------------------------------------------------

[Clean]        Boot sector on drive F:
[Clean]        Boot sector on drive E:
[Clean]        Boot sector on drive D:
[Clean]        Boot sector on drive G:
[Clean]        Boot sector on drive C:
[Clean]        Master Boot Record on disk 0
[Clean]        F:\RECYCLER\S-1-5-21-299502267-1897051121-725345543-500\desktop.ini
[Clean]        F:\RECYCLER\S-1-5-21-299502267-1897051121-725345543-500\INFO2
[Found possible virus]         <W32/Threat-SysVenFakU-based!Maximus (not disinfectable)>        F:\SYSTEM32.rar->A7F46ED0.EXE
[Clean]        F:\SYSTEM32.rar->CA61E828.DLL->(embedded)->(UPack)
[Found downloader]         <W32/Downloader.C.gen!Eldorado (not disinfectable, generic)>        F:\SYSTEM32.rar->CA61E828.DLL
[Contains infected objects]        F:\SYSTEM32.rar
[Quarantined]        F:\SYSTEM32.rar->CA61E828.DLL

---------------------------------------------------------------------
Scan ended:        2008-1-28, 23:07:05
Duration:        0:00:02

Scan result:

Scanned files:                 9
Infected objects:         2
Disinfected objects:         0
Quarantined files:         1

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\SYSTEM32.rar'
C:\Documents and Settings\Administrator\My Documents\
  SYSTEM32.rar
  SYSTEM32.rar:Zone.Identifier
    [0] Archive type: RAR
    --> A7F46ED0.EXE
        [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> CA61E828.DLL
        [INFO]      The file was deleted!

blu_ray

红伞p报