[病毒样本] one

显示全部楼层 · 发表于 2008-2-11 00:25:37

卡巴不报，上报

显示全部楼层 · 发表于 2008-2-11 00:27:51

F:\virus\Hao.rar » RAR » Hao.exe - probably a variant of Win32/Genetik trojan

显示全部楼层 · 发表于 2008-2-11 00:30:48

IK
I:\virus\Hao.rar:\Hao.exe - Signature 'Virus.Win32.AutoRun.fi' found
I:\virus\Hao.rar

      2 Files scanned
      (1 Archiv with 1 file)
      1 Signature found
      0 Suspect code-parts found
      Used time: 0:00.047
----------------------------

[ 本帖最后由冷_冷于 2008-2-11 00:38 编辑 ]

显示全部楼层 · 发表于 2008-2-11 00:41:35

FS系统控制拦截部分动作

显示全部楼层 · 发表于 2008-2-11 00:47:56

Scan Log
Version of virus signature database: 2861 (20080209)
Date: 2008-2-11  Time: 0:52:59
Scanned disks, folders and files: E:\virus\Hao.rar
E:\virus\Hao.rar » RAR » Hao.exe - probably a variant of Win32/Genetik trojan - was a part of the deleted object
Number of scanned objects: 2
Number of threats found: 1
Time of completion: 0:53:06  Total scanning time: 7 sec (00:00:07)

2008-2-11 0:53:14 Kernel File  'Hao.exe' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-2-11 00:49:20

Hello,

Hao.exek - Worm.Win32.AutoRun.clu

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-2-11 00:56:25

江民0

显示全部楼层 · 发表于 2008-2-11 01:07:29

病毒: Win32:AutoRun-FI
文件: Hao[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\B64X7CKM
进程: Maxthon.exe

显示全部楼层 · 发表于 2008-2-11 01:12:47

avast 直接拦截无法下载

[病毒样本] one

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块