过kaba的3个，用md5命名！

显示全部楼层 · 发表于 2008-3-11 12:33:57

过kaba的3个，用md5命名！

显示全部楼层 · 发表于 2008-3-11 12:35:11

C:\Documents and Settings\Don johnson\桌面\桌面.rar » RAR » 0a72b556d8c661871a944feb1457f16c.bin - a variant of Win32/Rootkit.Agent.NCK trojan
C:\Documents and Settings\Don johnson\桌面\桌面.rar » RAR » 0a426dd143818e8da20e39c982d2c371.bin - a variant of Win32/PcClient trojan

显示全部楼层 · 发表于 2008-3-11 12:35:54

E:\VIRUS\桌面11.rar » RAR » 0a72b556d8c661871a944feb1457f16c.bin - a variant of Win32/Rootkit.Agent.NCK trojan
E:\VIRUS\桌面11.rar » RAR » 0a426dd143818e8da20e39c982d2c371.bin - a variant of Win32/PcClient trojan

显示全部楼层 · 发表于 2008-3-11 12:38:21

信息 2008-03-11  12:37:14 您此次查毒清除了2个病毒
信息 2008-03-11  12:37:14 您此次查毒共查出2个病毒以及危险代码
信息 2008-03-11  12:37:14 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件4个
信息 2008-03-11  12:37:14 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-03-11  12:37:14 D:\Desktop\桌面.rar\0a426dd143818e8da20e39c982d2c371.bin Win32.Troj.PcClientT.ad.61601 清除成功
病毒 2008-03-11  12:37:14 D:\Desktop\桌面.rar\0a72b556d8c661871a944feb1457f16c.bin Win32.Troj.RootKitT.bh.26208 清除成功

显示全部楼层 · 发表于 2008-3-11 12:39:38

Begin scan in 'E:\VIRUS\桌面11.rar'
E:\VIRUS\桌面11.rar
  [0] Archive type: RAR
  --> 0a72b556d8c661871a944feb1457f16c.bin
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 0a426dd143818e8da20e39c982d2c371.bin
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.ahj Backdoor server programs

显示全部楼层 · 发表于 2008-3-11 12:46:23

红伞也只查出来两个。

显示全部楼层 · 发表于 2008-3-11 13:44:17

过红伞一个已上报
File ID  Filename  Size (Byte) Result
3788234  0b555cd6699f6dea1...4a.bin  2.38 KB  UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename Result
0b555cd6699f6dea1...4a.bin  UNDER ANALYSIS

The file '0b555cd6699f6dea129f1eaa52a5a44a.bin' has been determined to be 'UNDER ANALYSIS'.

显示全部楼层 · 发表于 2008-3-11 14:52:50

跑不起来

显示全部楼层 · 发表于 2008-3-11 15:11:09

Hello,

0a426dd143818e8da20e39c982d2c371.bin - Backdoor.Win32.PcClient.bsx,
0a72b556d8c661871a944feb1457f16c.bin - Trojan-Downloader.Win32.Hmir.apo

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

0b555cd6699f6dea129f1eaa52a5a44a.bin

No malicious code was found in this file.

Please quote all when answering.

--
Best regards, Ermilov Maxim
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: 3.rar
[:1:]

显示全部楼层 · 发表于 2008-3-11 20:50:16

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： AdWare.Win32.Agent.GEN

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.35.12

[病毒样本] 过kaba的3个，用md5命名！

本帖子中包含更多资源

评分

4/1