深度上刨下来的两个！！

显示全部楼层 · 发表于 2008-2-5 23:14:03

E:\virus\请慎用(利器_第三季).rar » RAR » schost.exe - probably a variant of Win32/Genetik trojan - was a part of the deleted object
E:\virus\请慎用(利器_第三季).rar - probably a variant of Win32/Genetik trojan - deleted - quarantined

显示全部楼层 · 发表于 2008-2-5 23:18:42

金山全飘。。。

显示全部楼层 · 发表于 2008-2-5 23:35:39

Hello,

2.4.exe_ - Backdoor.Win32.Ceckno.qn,

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2008-2-6 00:00:38

IK
I:\virus\test\2[1][1].4.rar:\2.4.exe - Signature 'BehavesLikeWin32.ExplorerHijack' found
I:\virus\test\2[1][1].4.rar
I:\virus\test\请慎用(利器_第三季).rar:\schost.exe
I:\virus\test\请慎用(利器_第三季).rar

4 Files scanned
(2 Archives with 2 files)
1 Signature found
0 Suspect code-parts found
Used time: 0:02.204

显示全部楼层 · 发表于 2008-2-6 00:05:28

Hello,

schost.exe_ - Worm.Win32.AutoRun.ckb

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

显示全部楼层 · 发表于 2008-2-6 07:35:59

The file 'schost.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Agent.iva. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

3720855    Recycleds.url    97 Byte    CLEAN
3720856    ########.url    96 Byte    CLEAN
3720857    system.ini    332 Byte    CLEAN
3720858    wbemprox.log    22.6 KB    CLEAN
3720859    schosthelp.exe    46 KB    CLEAN
3720766    schost.exe    85 KB    MALWARE

显示全部楼层 · 发表于 2008-2-6 09:07:43

vvvvvvvvvvvvvvvvv

[病毒样本] 深度上刨下来的两个！！

回复 2楼 ALEXBLAIR 的帖子