A keylogger program

woai_jolin

过不了norman


===================================================================================================
On-demand scanner 7.0.0.10

NSE revision 5.91.10
nvcbin.def revision 5.90.00 of 2008/02/13 18:03:03 (1304206 variants)
nvcmacro.def revision 5.90.00 of 2008/02/04 16:47:24 (20430 variants)
Total number of variants: 1324636
===================================================================================================


*** Possible virus found ***
*** G:\v\logo.rar : logo.jpg -> Backdoor Farfli.gen7 ()
- File G:\v\logo.rar quarantined.

===================================================================================================

The scanning started: 2008/02/14 17:18:39
               ended: 2008/02/14 17:18:39
Logged on as        : Administrator
on hostname         : 0AB2B4C883ED4CF

Scanning results:
   Total number of files found..............................:       3
   Number of files scanned..................................:       3
   Number of files/directories skipped due to exclude list..:       0
   Number of files that could not be opened.................:       0
   Number of archive files unpacked.........................:       1
   Number of archive files not unpacked.....................:       0
   Number of infections.....................................:       1

Copyright (c) 1993-2007 Norman ASA.

spatra

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\logo.rar'
C:\Documents and Settings\Administrator\桌面\logo.rar
  [0] Archive type: RAR
  --> logo.jpg
      [DETECTION] Is the Trojan horse TR/Drop.Agent.cpk.1
      [INFO]      The file was moved to '481b0955.qua'!

leonfg

原帖由 woai_jolin 于 2008-2-14 17:21 发表
过不了norman


===================================================================================================
On-demand scanner 7.0.0.10

NSE revision 5.91.10
nvcbin.def revision 5. ...

果然，后缀改成exe运行，FS的N记沙盘就报了：
在文件 D:\DOWNLOAD\VIRUS\LOGO.EXE 中发现恶意代码。
感染: Farfli.gen7
操作: 无.

[ 本帖最后由 leonfg 于 2008-2-14 17:33 编辑 ]

qigang

rising20.31.30未杀！

sharkkong

Hello,

logo.jpg_ - Trojan-Downloader.Win32.Hmir.acx

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.


> Attachment: logo.rar

xiaoxmj

keylogger 就是键盘记录器类的木马