email中的毒网(附病毒样本)

显示全部楼层 · 发表于 2008-2-26 21:51:55

周杰倫【歷年電影精選全記錄】http://www.tw-cools.com ◆ 2005 頭文字D◆2006 滿城盡帶黃金甲◆2007 不能說的秘密◆2008 功夫灌籃◆粉經典ㄛ!

毒：
http://www.tw-cools.com/movie.scr

上报卡巴

Hello,

movie.scr_ - Trojan-PSW.Win32.OnLineGames.rxq

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 kato9096 于 2008-2-26 22:50 编辑 ]

显示全部楼层 · 发表于 2008-2-26 21:54:55

NOD
E:\pic\_PICtemp\movie.rar >>RAR >>movie.scr >>RAR >>server.exe - 可能是 Win32/PSW.OnLineGames.PLR 木马的一个变种

显示全部楼层 · 发表于 2008-2-26 21:55:46

BD BehavesLike:Trojan.ShellHook

显示全部楼层 · 发表于 2008-2-26 22:10:27

C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TWIEX1\SERVER.EXE Trojan.Agent.zri.sxka 木马还未处理
C:\Documents and Settings\Administrator\桌面\movie.rar>>movie.scr>>server.exe Trojan.Agent.zri.sxka 木马还未处理

显示全部楼层 · 发表于 2008-2-26 22:15:49

金山挂

显示全部楼层 · 发表于 2008-2-26 22:18:40

The file 'movie.scr' has been determined to be 'UNDER ANALYSIS'

显示全部楼层 · 发表于 2008-2-26 22:21:13

F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2008-2-26, 4:15

Scan name: Virus tester
Path to scan: C:\Test\|

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2008-2-26, 22:20:01
---------------------------------------------------------------------

[Error] <Scanning error> F:
[Error] <Scanning error> E:
[Found security risk] <W32/Agent.J.gen!Eldorado (not disinfectable, generic)> C:\Test\movie.rar->movie.scr->(RAR)->server.exe

---------------------------------------------------------------------
Scan ended: 2008-2-26, 22:20:02
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-2-26 22:23:01

AcraBit pass.

显示全部楼层 · 发表于 2008-2-27 09:02:23

C:\Documents and Settings\软件学院\桌面\movie.rar>RAR>movie.scr>RAR>server.exe - 可能是 Win32/PSW.OnLineGames.PLR 特洛伊木马的变种

显示全部楼层 · 发表于 2008-2-27 09:12:20

紅傘C無視

[ 本帖最后由 llgiggs 于 2008-2-27 09:29 编辑 ]

[其他相关] email中的毒网(附病毒样本)

本帖子中包含更多资源

本帖子中包含更多资源