据说能感染RAR文件的磁碟机变种！

显示全部楼层 · 发表于 2008-3-2 12:04:43

Hello.
New malicious software was found in the attached file.
It's detection will be included as soon as possible. Thank you for your help.
-----------------
Regards, Yury Nesmachny
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

> Attachment: 15656.rar
> Attachment: xxx.rar

显示全部楼层 · 发表于 2008-3-2 12:27:06

Begin scan in 'C:\Documents and Settings\haha\桌面\15656.rar'
C:\Documents and Settings\haha\桌面\15656.rar
  [0] Archive type: RAR
--> 15656\setup.exe
      [DETECTION] Is the Trojan horse TR/Drop.Xorer.C
   [INFO]    A backup was created as '48002cdf.qua'  ( QUARANTINE )

显示全部楼层 · 发表于 2008-3-2 12:45:51

看来这个没有针对红伞做免杀。

显示全部楼层 · 发表于 2008-3-2 14:15:40

NOD32报拉..

显示全部楼层 · 发表于 2008-3-2 14:57:10

请问一下3楼，你用的COMDOD是哪个版本啊谢谢

显示全部楼层 · 发表于 2008-3-2 20:21:59

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Worm.Win32.DiskGen.gfc

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.33.62

显示全部楼层 · 发表于 2008-3-2 20:23:38

原帖由 xqiafl 于 2008-3-2 09:17 发表
222.208.183.204 这个IP 封了,什么事都没有了!

inetnum:    222.208.0.0 - 222.215.255.255
netname:    CHINANET-SC
descr:       CHINANET Sichuan province network

显示全部楼层 · 发表于 2008-3-2 20:30:35

上报McAfee!

显示全部楼层 · 发表于 2008-3-3 19:10:36

Hello,

Setup.exe_ - Virus.Win32.Xorer.ek

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Alexander Romanenko
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

今天再上报,回复不同了

[已鉴定] 据说能感染RAR文件的磁碟机变种！

4/1