瑞星用户又中毒了

wangjay1980

Hello,

helpnt.dll - Trojan-Downloader.Win32.Agent.ieh,
vzmyguij.sys - Rootkit.Win32.Agent.xw

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

kiocpfp.sys

No malicious code was found in this file.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: My QQ Files.rar

su-tt

别动不动就说XX用户中毒

Begin scan in 'C:\Documents and Settings\Administrator\桌面\My QQ Files.rar'
C:\Documents and Settings\Administrator\桌面\My QQ Files.rar
  [0] Archive type: RAR
  --> userinit.exe.ÖØÃüÃû
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.iaj.2
      [INFO]      The file was deleted!


End of the scan: 2008年1月31日  14:32
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
      5 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Edog.g      

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.29.30

没有中毒也。

Graybird

The file 'kiocpfp.sys' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

The file 'vzmyguij.sys' has been determined to be 'MALWARE'. Virus name is Rootkit (en) Detection will be added to our virus definition file (VDF) with one of the next updates.

The file 'helpnt.dll' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Agent.ieh. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

[ 本帖最后由 Graybird 于 2008-1-31 17:32 编辑 ]

挪威的冬天

信息 2008-01-31  17:45:00 您此次查毒共查出1个病毒以及危险代码   
信息 2008-01-31  17:45:00 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件6个   
信息 2008-01-31  17:45:00 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒   
病毒 2008-01-31  17:45:00 C:\Users\挪威的冬天\Desktop\My_QQ_Files.rar\userinit.exe.重命名 Win32.Troj.MacDog.us.65536 跳过，未处理

醉一生爱妍

费尔杀。。。

baichi

原帖由 qigang 于 2008-1-31 15:43 发表
瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Edog.g      

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.29.30

没有中毒也。

同

gho

扫描报告
2008年1月31日 18:32:06 - 18:32:06
计算机名称: CN-89FF4B9EA4D6
扫描类型: 扫描目标
目标: I:\hanxiaojun\My QQ Files.rar


--------------------------------------------------------------------------------

结果: 找到 1 恶意软件
Trojan-Downloader.Win32.Agent.iaj (病毒)
I:\hanxiaojun\My QQ Files.rar\userinit.exe.重命名

碧水寒潭

Start of the scan: 2008年1月31日  18:35

Starting the file scan:

Begin scan in 'I:\样本'
I:\样本\My QQ Files.rar
  [0] Archive type: RAR
  --> userinit.exe.ÖØÃüÃû
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.iaj.2
      [INFO]      The file was deleted!


End of the scan: 2008年1月31日  18:35
Used time: 00:12 min

The scan has been done completely.

      1 Scanning directories
      5 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes