[病毒样本] 1

显示全部楼层 · 发表于 2008-3-7 10:32:35

Begin scan in 'C:\Documents and Settings\Administrator\桌面\last.exe'
C:\Documents and Settings\Administrator\桌面\last.exe
[DETECTION] Contains suspicious code HEUR/Malware

显示全部楼层 · 发表于 2008-3-7 10:51:19

诺顿杀掉

显示全部楼层 · 发表于 2008-3-7 11:08:48

IK
I:\virus\March\7\last.rar:\last.exe - Suspect code-parts found (Level: 95)
I:\virus\March\7\last.rar

2 Files scanned
(1 Archiv with 1 file)
0 Signatures found
1 Suspect code-part found
Used time: 0:00.062

显示全部楼层 · 发表于 2008-3-7 11:24:07

微点砍掉

显示全部楼层 · 发表于 2008-3-7 11:44:54

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\last.rar'
C:\Documents and Settings\Administrator\My Documents\
  last.rar
[0] Archive type: RAR
   --> last.exe
      [1] Archive type: Runtime Packed
      --> Object
   [INFO]    The file was deleted!

End of the scan: 2008年3月6日  19:44
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   0 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-3-7 11:56:18

D:\firefox download\last.rar » RAR » last.exe - probably a variant of Win32/Genetik trojan - was a part of the deleted object
D:\firefox download\last.rar - probably a variant of Win32/Genetik trojan - deleted - quarantined

显示全部楼层 · 发表于 2008-3-7 12:09:50

Hello,

last.exe_ - Worm.Win32.AutoRun.cxp

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Ermilov Maxim
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: last.rar

显示全部楼层 · 发表于 2008-3-7 12:11:03

Win32:AutoRun-IC avast!

显示全部楼层 · 发表于 2008-3-7 14:54:58

Filename Result
last.exe MALWARE

The file 'last.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Autorun.CM. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.

[病毒样本] 1

本帖子中包含更多资源

本帖子中包含更多资源