1

ALEXBLAIR

加驱动
改启动项
估计是auto类型的
卡巴不报
另外，还有生成物一堆~~

Graybird

Starting the file scan:

Begin scan in 'E:\1111111.rar'
E:\1111111.rar
  [0] Archive type: RAR
  --> 000\000.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 000\drivers\svchost.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!

上报~

The file 'rs.bat' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

[ 本帖最后由 Graybird 于 2008-2-4 18:51 编辑 ]

Graybird

The file 'svchost.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Worm. Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

The file 'AutoRun.inf' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

Graybird

The file '000.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Worm. Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

leonfg

ESET  1+3
C:\Documents and Settings\GUNDAM\桌面\000.rar » RAR » 000.exe - probably a variant of Win32/Genetik trojan

C:\Documents and Settings\GUNDAM\桌面\1111111.rar » RAR » 000\000.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\GUNDAM\桌面\1111111.rar » RAR » 000\drivers\svchost.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\GUNDAM\桌面\1111111.rar » RAR » 000\rs.bat - BAT/SelfKill.NAH trojan

蜘蛛 1+2

[ 本帖最后由 leonfg 于 2008-2-4 19:21 编辑 ]

qigang

rising20.30未杀！

ALEXBLAIR

Hello,

000.exe_,
AutoRun.inf,
svchost.exe_ - Worm.Win32.AutoRun.ciw

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

rs.bat_

No malicious code was found in this file.

Please quote all when answering.

--
Best regards, Dmitry Shvetsov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

BING126

McAfee  MISS

挪威的冬天

信息        2008-02-04  21:38:43        您此次查毒共查出1个病毒以及危险代码                       
信息        2008-02-04  21:38:43        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件5个                       
信息        2008-02-04  21:38:43        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-02-04  21:38:43        C:\Users\挪威的冬天\Desktop\1111111.rar\000\rs.bat        BAT.KillSelf.e        跳过，未处理