一个不知名文件,8家报毒(10楼有衍生物)

显示全部楼层 · 发表于 2008-2-4 14:33:27

原帖由 黑色恋爱 于 2008-2-4 14:21 发表
费尔扫描木马一个

还没等用费尔扫描，就被迅雷结合的喀吧模块删掉

显示全部楼层 · 发表于 2008-2-4 15:08:52

衍生物:

Hello,

final.exe_, HIJACKTHIS.exe_, nvswc32.exe_ - Trojan-Proxy.Win32.VB.ac

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Ermilov Maxim
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-2-4 15:19:57

衍生物大蜘蛛还是不报，红伞杀

Begin scan in 'C:\Documents and Settings\Administrator\桌面\111.rar'
C:\Documents and Settings\Administrator\桌面\111.rar
  [0] Archive type: RAR
  --> nvswc32.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> final.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [INFO]    The file was deleted!

End of the scan: 2008年2月4日  15:19
Used time: 00:05 min

The scan has been done completely.

   0 Scanning directories
   4 Files were scanned
   2 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-2-4 15:22:39

rising20.30未知！不杀也！衍生物也未报！

显示全部楼层 · 发表于 2008-2-4 17:21:30

Hello,

Finish10.exe_ - Trojan-Proxy.Win32.VB.ac

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-2-4 17:27:45

2008-2-4 17:33:31 Kernel File 'E:\virus\111.rar' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-2-4 17:30:42

原帖由 kato9096 于 2008-2-4 14:18 发表
如何看到？？

mofunzone 经常接触这些软件，怎么会不知道呢！！

---------------------

IK【PASS】

http://bbs.kafan.cn/viewthread.php?tid=198454&extra=page%3D1 跟这个贴的病毒有点相似

[ 本帖最后由冷_冷于 2008-2-4 17:34 编辑 ]

显示全部楼层 · 发表于 2008-2-4 17:31:46

原帖由 kato9096 于 2008-2-4 15:08 发表
衍生物:

Hello,

final.exe_, HIJACKTHIS.exe_, nvswc32.exe_ - Trojan-Proxy.Win32.VB.ac

New malicious software was found in these files. Detection will be included in the next update. Thank you ...

卡巴抽风 ?

显示全部楼层 · 发表于 2008-2-4 17:32:35

代理工具？

显示全部楼层 · 发表于 2008-2-4 17:50:14

2008-2-4 17:48:42 Kernel File 'G:\v\nvswc32.exe' was sent to ESET for analysis.
2008-2-4 17:47:53 Kernel File 'G:\v\HIJACKTHIS.exe' was sent to ESET for analysis.

[病毒样本] 一个不知名文件,8家报毒(10楼有衍生物)