10(上报后卡巴报3个)

显示全部楼层 · 发表于 2008-3-10 00:24:01

上报卡巴

Hello.

New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

--
Regards, Ilya Goncharov
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

[ 本帖最后由 kato9096 于 2008-3-10 19:40 编辑 ]

显示全部楼层 · 发表于 2008-3-10 00:27:27

C:\Documents and Settings\Don johnson\桌面\10.rar » RAR » q3.exe4 - a variant of Win32/HackTool.Xarp trojan
C:\Documents and Settings\Don johnson\桌面\10.rar » RAR » qnupkejx.sys - Win32/StartPage.ATV trojan

显示全部楼层 · 发表于 2008-3-10 02:58:21

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\10.rar'
C:\Documents and Settings\Administrator\桌面\10.rar
  [0] Archive type: RAR
  --> fci.exe2
   [DETECTION] Contains detection pattern of the dropper DR/Agent.ZCI.10
  --> q3.exe4
   [DETECTION] Contains suspicious code HEUR/Crypted
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-3-10 03:06:22

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\10'
C:\Documents and Settings\Administrator\My Documents\10\
  A0004751.exe2
  dvdromdrvs.inf
  fastcopy.exe4
  fci.exe2
   [DETECTION] Contains detection pattern of the dropper DR/Agent.ZCI.10
   [NOTE]    The file was deleted!
  NmCoInst.dll
  Packet.dll
  q3.exe4
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  qnupkejx.sys
  WanPacket.dll
  wpcap.dll

End of the scan: 2000年3月9日  11:06
Used time: 00:04 min

The scan has been done completely.

   1 Scanning directories
   10 Files were scanned
   1 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   2 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   9 Files not concerned
   0 Archives were scanned
   0 Warnings
   2 Notes

显示全部楼层 · 发表于 2008-3-10 05:28:58

Norton 2008 all miss....

显示全部楼层 · 发表于 2008-3-10 07:57:32

信息 2008-03-10  07:57:04 您此次查毒清除了1个病毒
信息 2008-03-10  07:57:04 您此次查毒共查出1个病毒以及危险代码
信息 2008-03-10  07:57:04 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件13个
信息 2008-03-10  07:57:04 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-03-10  07:57:04 D:\Desktop\10.rar\qnupkejx.sys Win32.Troj.StartPage.19104 清除成功

显示全部楼层 · 发表于 2008-3-10 10:47:11

2008-3-10 10:46:24 Kernel File 'D:\firefox download\10.rar' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-3-10 11:43:19

Hello.

New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

--
Regards, Ilya Goncharov
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2008-3-10 11:56:11

已刪除: 特洛伊木馬程式 Trojan.Win32.Obfuscated.qr 檔案: C:\Documents and Settings\kato9096\桌面\10.rar/fci.exe2//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.hlq 檔案: C:\Documents and Settings\kato9096\桌面\10.rar/q3.exe4//PE_Patch.PECompact//PecBundle//PECompact
已刪除: 特洛伊木馬程式 Trojan.Win32.StartPage.ayx 檔案: C:\Documents and Settings\kato9096\桌面\10.rar/qnupkejx.sys

显示全部楼层 · 发表于 2008-3-10 12:36:14

卡巴3个[:1:]

[病毒样本] 10(上报后卡巴报3个)

本帖子中包含更多资源

回复 8楼 kato9096 的帖子