NOD32被过

显示全部楼层 · 发表于 2008-2-21 02:12:07

NOD32 竟然 ...

显示全部楼层 · 发表于 2008-2-21 02:29:24

显示全部楼层 · 发表于 2008-2-21 03:36:34

2008-2-21 3:36:24 Kernel File 'E:\virus\niu.rar' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-2-21 03:42:04

卡巴飘过。。。。。

显示全部楼层 · 发表于 2008-2-21 03:44:55

沙盘中运行，出现N个Reg.exe还有svsh0st.exe
还从www.20941.com.cn下载downloader病毒。。。

显示全部楼层 · 发表于 2008-2-21 03:45:08

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\niu.rar'
C:\Documents and Settings\Administrator\My Documents\
  niu.rar
[0] Archive type: RAR
--> niu.ex4e
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
   [WARNING] The file was ignored!
  niu.rar:Zone.Identifier

显示全部楼层 · 发表于 2008-2-21 06:40:57

Starting the file scan:

Begin scan in 'E:\Antivir\niu.rar'
E:\Antivir\niu.rar
  [0] Archive type: RAR
  --> niu.ex4e
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-2-21 08:51:14

to kl

Hello,

2008020113TestHttp.exek

No malicious code was found in this file.

3.exek - Trojan-Downloader.Win32.Small.imt,
5.exek - Backdoor.Win32.Agent.eqc,
52vip_yoyo1012.exek - Backdoor.Win32.Rbot.htn,
an006.exek - Trojan-Downloader.Win32.Agent.jhx,
exe.exek - Trojan-Downloader.Win32.Agent.jhy,
mrofinu565.exek - Trojan-Downloader.Win32.Agent.jhv,
niu.ex4e - Worm.Win32.AutoRun.cpy, [:1:]
qq.exek - Trojan.Win32.Pakes.cew,
www.hmhk.cn.exek - Backdoor.Win32.Hupigon.axet

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

73e1.exek - not-a-virus:AdWare.Win32.BHO.abi

This file is an Advertizing Tool, it is detected by
extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 wangjay1980 于 2008-2-21 11:40 编辑 ]

显示全部楼层 · 发表于 2008-2-21 10:10:45

VT上FS怎么报这个：
F-Secure 6.70.13260.0 2008.02.20 Suspicious:W32/Malware!Gemini
错了吧

显示全部楼层 · 发表于 2008-2-21 10:31:02

原帖由 leonfg 于 2008-2-21 10:10 发表
VT上FS怎么报这个：
F-Secure 6.70.13260.0 2008.02.20 Suspicious:W32/Malware!Gemini
错了吧

这个是FS自己的启发啊，Gemini引擎报的

[病毒样本] NOD32被过

本帖子中包含更多资源

本帖子中包含更多资源