[病毒样本] 6 x

显示全部楼层 · 发表于 2008-3-8 14:54:10

Hello,

####.exed - Trojan-Downloader.Win32.Agent.kud,
012.exed - Trojan-Dropper.Win32.Small.bgz,
haizhong52_yoyo1025.exed - Backdoor.Win32.Rbot.pis,
my_70150.exed - Trojan-Downloader.Win32.QQHelper.bar

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Denis Maslennikov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-3-8 17:24:19

金山

风险程序 2008-03-08 17:25:52 D:\Documents and Settings\Norway's Winter\桌面\6 Pcs.rar\haizhong52_yoyo1025.exe Win32.RiskWare.ZloQQ.hk.154875 跳过，未处理
病毒 2008-03-08 17:25:48 D:\Documents and Settings\Norway's Winter\桌面\6 Pcs.rar\setup1056.exe Win32.Troj.AgentT.86016 清除成功

显示全部楼层 · 发表于 2008-3-8 17:42:44

我晕只报了一个...

显示全部楼层 · 发表于 2008-3-8 22:03:40

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Mnless.yk
病毒： Trojan.DL.Win32.Mnless.zby

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.34.52

显示全部楼层 · 发表于 2008-3-8 23:09:41

4

Sign of "Win32:Agent-PDY [Trj]" has been found in "F:\6\012.exe" file.
Sign of "Win32:Trojan-gen {Other}" has been found in "F:\6\dodolook040.exe" file.
Sign of "Win32:Agent-OXO [Trj]" has been found in "F:\6\haizhong52_yoyo1025.exe\$[32]\32.exe\[ASProtect]" file.
Sign of "Win32:Small-JQQ [Trj]" has been found in "F:\6\my_70150.exe" file.

晕监控不能解nsis

[ 本帖最后由 hj5abc 于 2008-3-8 23:13 编辑 ]

显示全部楼层 · 发表于 2008-3-9 00:08:59

===================================================================================================
On-demand scanner 7.0.0.10

NSE revision 5.91.10
nvcbin.def revision 5.90.00 of 2008/03/07 16:10:27 (1356064 variants)
nvcmacro.def revision 5.90.00 of 2008/02/04 16:47:24 (20430 variants)
Total number of variants: 1376494
===================================================================================================

   Time  Filename                                                    Virus name
---------------------------------------------------------------------------------------------------

- Scanning drive: G:\
- Scanning system areas of drive: G:\
- Scanning files matching: G:\v\6_Pcs.rar
   550 ms G:\v\6_Pcs.rar : 012.exe
   5823 ms G:\v\6_Pcs.rar : dodolook040.exe
   4087 ms G:\v\6_Pcs.rar : haizhong52_yoyo1025.exe
   165 ms G:\v\6_Pcs.rar : my_70150.exe                               Virus W32/Downloader ()
- File G:\v\6_Pcs.rar quarantined.
      2 ms G:\v\6_Pcs.rar : setup1056.exe                            Trojan W32/Hupigon.gen67 ()
- File G:\v\6_Pcs.rar quarantined.
   5864 ms G:\v\6_Pcs.rar : 安装启动.exe
      0 ms G:\v\6_Pcs.rar
      2 ms G:\v\6_Pcs.rar:Zone.Identifier

===================================================================================================

The scanning started: 2008/03/09 00:08:31
            ended: 2008/03/09 00:08:47
Logged on as       : Jason
on hostname       : JASON-PC

Scanning results:
Total number of files found..............................:    8
Number of files scanned..................................:    8
Number of files/directories skipped due to exclude list..:    0
Number of files that could not be opened.................:    0
Number of archive files unpacked.........................:    1
Number of archive files not unpacked.....................:    0
Number of infections.....................................:    2

Copyright (c) 1993-2007 Norman ASA.

[病毒样本] 6 x

14/3