微点抓到1个

sam.to

Hello,

2200.exe_ - Trojan-Downloader.Win32.Ieser.cd,
XZNPKDCRBDFJL.dll1 - Trojan-Downloader.Win32.Ieser.cc

These files are already detected. Please update your antivirus bases.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.


即是卡巴官网的引擎不够update

spaceplane

卡巴真快。。。

Graybird

The file '2200.EXE' has been determined to be 'MALWARE'. Our analysts named the threat TR/Drop.Agent.ayg. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

wiroxp

2008-02-21 20:43:28    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\桌面\2200.EXE
文件路径:C:\WINDOWS\system32\hiuafgluiruek.dll
触发规则:所有程序规则->文件规则->%systemdrive%\*.dll


2008-02-21 20:43:28    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\桌面\2200.EXE
文件路径:C:\WINDOWS\system32\SkypeClient.exe
触发规则:所有程序规则->文件规则->%systemdrive%\*.exe


2008-02-21 20:43:28    修改其它进程内存      操作:阻止
进程路径:C:\WINDOWS\system32\drwtsn32.exe
目标进程:C:\Documents and Settings\Administrator\桌面\桌面\2200.EXE
触发规则:所有程序规则->*


2008-02-21 20:43:59    修改其它进程内存      操作:阻止
进程路径:C:\WINDOWS\system32\drwtsn32.exe
目标进程:C:\Documents and Settings\Administrator\桌面\桌面\2200.EXE
触发规则:所有程序规则->*

tracydk

qigang

rising20.32.32未知！

28654621

D:\download\987F~1.RAR>>2200.EXE        TrojanDownloader.Ieser.bk.wecb        木马        还未处理
D:\download\987F~1.RAR>>XZNPKDCRBDFJL.DLL        TrojanDownloader.Agent.yip.nvkj.dll        木马        还未处理