[病毒样本] 6x

显示全部楼层 · 发表于 2008-3-2 18:33:09

Begin scan in 'D:\BOOK\06.rar'
D:\BOOK\06.rar
  [0] Archive type: RAR
  --> yyvrdvk.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> dsoxhgwt.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> dspwdef.exe
   [DETECTION] Is the Trojan horse TR/Crypt.FSPM.Gen
  --> yxrf.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> d.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> egro.exe
   [DETECTION] Is the Trojan horse TR/Proxy.Wintu.A
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-3-2 18:33:52

已删除: 木马程序 Trojan-Spy.Win32.Agent.ble 文件: E:\下载\06.rar/yyvrdvk.exe//#
已删除: 木马程序 Trojan-Dropper.Win32.Small.bfg 文件: E:\下载\06.rar/dsoxhgwt.exe
已删除: 木马程序 Trojan-Downloader.Win32.Agent.hyy 文件: E:\下载\06.rar/dspwdef.exe
已删除: 病毒 Heur.Trojan.Generic （变种）文件: E:\下载\06.rar/yxrf.exe//PE_Patch.UPX
已删除: 木马程序 Trojan-Dropper.Win32.Nulprot.q 文件: E:\下载\06.rar/d.exe
已删除: 木马程序 Trojan-Proxy.Win32.Wintu.a 文件: E:\下载\06.rar/egro.exe//UPX

显示全部楼层 · 发表于 2008-3-2 18:48:06

已删除：木马程序 Trojan-Spy.Win32.Agent.ble 文件: C:\Documents and Settings\Administrator\桌面\06.rar/yyvrdvk.exe//#
已删除：木马程序 Trojan-Dropper.Win32.Small.bfg 文件: C:\Documents and Settings\Administrator\桌面\06.rar/dsoxhgwt.exe
已删除：木马程序 Trojan-Downloader.Win32.Agent.hyy 文件: C:\Documents and Settings\Administrator\桌面\06.rar/dspwdef.exe
已隔离：病毒 Heur.Trojan.Generic (修改) 文件: C:\Documents and Settings\Administrator\桌面\06.rar/yxrf.exe//PE_Patch.UPX
已删除：木马程序 Trojan-Dropper.Win32.Nulprot.q 文件: C:\Documents and Settings\Administrator\桌面\06.rar/d.exe
已删除：木马程序 Trojan-Proxy.Win32.Wintu.a 文件: C:\Documents and Settings\Administrator\桌面\06.rar/egro.exe//UPX

显示全部楼层 · 发表于 2008-3-2 18:58:50

已刪除: 特洛伊木馬程式 Trojan-Dropper.Win32.Small.bfg 檔案: C:\Documents and Settings\kato9096\桌面\212048.rar/dsoxhgwt.exe
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.hyy 檔案: C:\Documents and Settings\kato9096\桌面\212048.rar/dspwdef.exe
已刪除: 特洛伊木馬程式 Trojan-Dropper.Win32.Nulprot.q 檔案: C:\Documents and Settings\kato9096\桌面\212048.rar/d.exe
已刪除: 特洛伊木馬程式 Trojan-Proxy.Win32.Wintu.a 檔案: C:\Documents and Settings\kato9096\桌面\212048.rar/egro.exe//UPX

4,上报K.L.

显示全部楼层 · 发表于 2008-3-2 20:01:25

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Undef.czb
病毒： Trojan.Win32.Undef.dfv

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.33.62

显示全部楼层 · 发表于 2008-3-2 20:08:07

C:\Documents and Settings\GUNDAM\桌面\06.rar » RAR » dspwdef.exe - Win32/TrojanDownloader.Small.NSL trojan
C:\Documents and Settings\GUNDAM\桌面\06.rar » RAR » d.exe - Win32/Nulprot.NAK trojan
C:\Documents and Settings\GUNDAM\桌面\06.rar » RAR » egro.exe - Win32/TrojanProxy.Wintu trojan

显示全部楼层 · 发表于 2008-3-2 20:08:43

V8 BETA6

Begin scan in 'C:\Documents and Settings\haha\桌面\06.rar'
C:\Documents and Settings\haha\桌面\06.rar
  [0] Archive type: RAR
--> yyvrdvk.exe
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> dsoxhgwt.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> dspwdef.exe
   [DETECTION] Is the Trojan horse TR/Crypt.FSPM.Gen
  --> d.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> egro.exe
   [DETECTION] Is the Trojan horse TR/Proxy.Wintu.A
   [INFO]    A backup was created as '47f898fe.qua'  ( QUARANTINE )

End of the scan: 2008年3月2日  20:08
Used time: 00:02 min

The scan has been done completely.

   0 Scanning directories
   7 Files were scanned
   5 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-3-2 20:13:17

Hello,

yxrf.exed - Trojan.Win32.Obfuscated.px,
yyvrdvk.exed - Trojan-Dropper.Win32.Small.bgi

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Denis Maslennikov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[病毒样本] 6x

本帖子中包含更多资源

本帖子中包含更多资源

11/2