瑞星用户中毒了，江民，金山，卡巴跟着挂

moonsilver

瑞星用户中毒了，江民，金山，卡巴跟着挂

Graybird

Starting the file scan:

Begin scan in 'E:\Service0.rar'
E:\Service0.rar
  [0] Archive type: RAR
  --> Service0.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.bnm
      [INFO]      The file was deleted!

wolffshen

FS挡住

啊弥陀佛

微点砍掉

htshandong

确实卡巴没有反应,

wangjay1980

搞的如此复杂 TO KL

2008-2-21 JAY12:22:26        Packed: UPX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe/#/PE_Patch.UPX               
2008-2-21 JAY12:22:26        Packed: PE_Patch.UPX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe/#               
2008-2-21 JAY12:22:26        Packed: UPX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe/#/PE_Patch.UPX               
2008-2-21 JAY12:22:26        Packed: PE_Patch.UPX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe/#               
2008-2-21 JAY12:22:26        Packed: UPX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe/#               
2008-2-21 JAY12:22:25        Packed: UPX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe/#/PE_Patch.UPX               
2008-2-21 JAY12:22:25        Packed: PE_Patch.UPX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe/#               
2008-2-21 JAY12:22:25        Packed: UPX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe/#/PE_Patch.UPX               
2008-2-21 JAY12:22:25        Packed: PE_Patch.UPX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe/#               
2008-2-21 JAY12:22:25        Packed: UPX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe/#               
2008-2-21 JAY12:22:25        Archive: Imul        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe               
2008-2-21 JAY12:22:25        Packed: UPX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe/UPX/Exmlrpc.fne/PE_Patch.UPX               
2008-2-21 JAY12:22:25        Packed: PE_Patch.UPX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe/UPX/Exmlrpc.fne               
2008-2-21 JAY12:22:25        Packed: UPX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe/UPX/dp1.fne/PE_Patch.UPX               
2008-2-21 JAY12:22:25        Packed: PE_Patch.UPX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe/UPX/dp1.fne               
2008-2-21 JAY12:22:25        Packed: UPX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe/UPX/krnln.fnr               
2008-2-21 JAY12:22:25        Archive: FlySFX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe/UPX               
2008-2-21 JAY12:22:25        Packed: UPX        C:\Documents and Settings\Owner\桌面\Service0.rar/Service0.exe               
2008-2-21 JAY12:22:24        Archive: RAR        C:\Documents and Settings\Owner\桌面\Service0.rar


Hello,

Service0.exek - Trojan.Win32.FlyStudio.bi

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: Service0.rar

[ 本帖最后由 wangjay1980 于 2008-2-21 13:04 编辑 ]

taiw_1144

运行了没？卡巴主防应该能拦截 了

leonfg

原帖由 wolffshen 于 2008-2-21 12:07 发表
FS挡住

头一次看见沙盘报这种格式的名字

wangjay1980

原帖由 taiw_1144 于 2008-2-21 12:28 发表
运行了没？卡巴主防应该能拦截 了

很少有主防拦截不了的，所以。。。

傻猪猪米走鸡

eset miss