ADx10 +1 trj

Graybird

3719371  dwrmntssfd.dll  296 KB  MALWARE
3718909  edfqvrw.dll  168 KB  UNDER ANALYSIS
3718910  frplprg.exe  80 KB  UNDER ANALYSIS
3719372  crsowkxrkv.exe  148 KB  UNDER ANALYSIS
1100658  win32xp.exe  21.02 KB  MALWARE
3719373  VideoAccessCodecI...ll.exe  114.52 KB  UNDER ANALYSIS
3719374  VideoAccessCodecI...l2.exe  165.35 KB  MALWARE
3719375  MediaEntertainmen...ec.ocx  364 KB  UNDER ANALYSIS
3719376  ust.dll  39.29 KB  UNDER ANALYSIS
3719377  afxlspw.dll  256 KB  UNDER ANALYSIS
3719378  bfrgnos.dll  224 KB  MALWARE

jimmyleo

Undet [                ](     ) in D:\Download\S\dwrmntssfd.dll
Undet [                ](     ) in D:\Download\S\edfqvrw.dll
Undet [                ](     ) in D:\Download\S\frplprg.exe
Found [WORM_NUCRYPT.GEN](    1) in D:\Download\S\crsowkxrkv.exe
Found [TROJ_DLOADER.FYN](    1) in D:\Download\S\win32xp.exe
Found [  WORM_NUCRP.GEN](    1) in D:\Download\S\VideoAccessCodecInstall.exe
Undet [                ](     ) in D:\Download\S\VideoAccessCodecInstall2.exe
Undet [                ](     ) in D:\Download\S\MediaEntertainmentCodec.ocx
Undet [                ](     ) in D:\Download\S\ust.dll
Undet [                ](     ) in D:\Download\S\afxlspw.dll
Undet [                ](     ) in D:\Download\S\bfrgnos.dll

trend=3

挪威的冬天

信息        2008-02-03  18:39:12        您此次查毒共查出2个病毒以及危险代码                       
信息        2008-02-03  18:39:12        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件12个                       
信息        2008-02-03  18:39:12        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
风险程序        2008-02-03  18:39:12        C:\Users\挪威的冬天\Desktop\Data03.rar\bfrgnos.dll        Win32.Adware.Vapsup.sz.221184        跳过，未处理       
病毒        2008-02-03  18:39:11        C:\Users\挪威的冬天\Desktop\Data03.rar\win32xp.exe        Win32.TrojDownloader.Delf.21527        跳过，未处理

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Delf.exq      

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.29.62

killloop

江民1个

su-tt

原帖由 tvuser2007 于 2008-2-3 18:03 发表
小红伞MISS~

你的是C版的吧，正常

su-tt

Begin scan in 'C:\Documents and Settings\Administrator\桌面\Data03.rar'
C:\Documents and Settings\Administrator\桌面\Data03.rar
  [0] Archive type: RAR
  --> dwrmntssfd.dll
      [DETECTION] Is the Trojan horse TR/Zlob.DIN
  --> win32xp.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
  --> VideoAccessCodecInstall2.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> bfrgnos.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Agent.PB
      [INFO]      The file was deleted!


End of the scan: 2008年2月3日  19:53
Used time: 00:07 min

The scan has been done completely.

      0 Scanning directories
     12 Files were scanned
      4 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      8 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

gho

Scanning Report
03 February 2008 20:29:19 - 20:29:23
Computer name: CN-89FF4B9EA4D6
Scanning type: Scan target
Target: I:\hanxiaojun\Data03.rar


--------------------------------------------------------------------------------

Result: 1 malware found
Trojan-Downloader.Win32.Delf.axb (virus)
I:\hanxiaojun\Data03.rar\win32xp.exe

wangjay1980

detected: Trojan program Trojan-Downloader.Win32.Delf.axb        File: C:\Documents and Settings\Owner\×ÀÃæ\Data03.rar/win32xp.exe//NSPack//PE_Patch.MaskPE

wangjay1980

Hello,

afxlspw.dll - not-a-virus:AdWare.Win32.Vapsup.ask,
bfrgnos.dll - not-a-virus:AdWare.Win32.Vapsup.asl,
dwrmntssfd.dll - not-a-virus:AdWare.Win32.Vapsup.asm,
edfqvrw.dll - not-a-virus:AdWare.Win32.Vapsup.asn,
frplprg.exek - not-a-virus:AdWare.Win32.Vapsup.aso

These files are Advertizing Tools, theirs detection will be included in the next
update of extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

crsowkxrkv.exek, VideoAccessCodecInstall2.exek - Trojan-Downloader.Win32.Zlob.hcb,
MediaEntertainmentCodec.ocx - Trojan.Win32.Agent.euv,
VideoAccessCodecInstall.exek - Trojan-Downloader.Win32.Zlob.hcc

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

ust.dll

No malicious code was found in this file.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: Data03.rar