3x

qianwenxiang

sam.to

已隔離: 病毒 Heur.Trojan.Generic (修改)        檔案: C:\Documents and Settings\kato9096\桌面\3.rar/svchost.exe
已刪除: 特洛伊木馬程式 Trojan-Clicker.Win32.VB.aio        檔案: C:\Documents and Settings\kato9096\桌面\3.rar/gdisvc.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.ife        檔案: C:\Documents and Settings\kato9096\桌面\3.rar/top.exe//PE_Patch//UPack

上报一

Starting the file scan:

Begin scan in 'E:\AVIRA\3.rar'
E:\AVIRA\3.rar
  [0] Archive type: RAR
  --> svchost.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> gdisvc.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> top.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!

sam.to

Hello,

svchost.exe_ - Trojan-Downloader.Win32.Delf.gav

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Yury Nesmachny
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

yangpizhi

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2008-3-21, 5:02

Scan name: virus scan
Path to scan: C:\virus\08-03-22\|

Thorough scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2008-3-22, 15:12:39
---------------------------------------------------------------------

[Clean]        Boot sector on drive F:
[Clean]        Boot sector on drive E:
[Clean]        Boot sector on drive D:
[Clean]        Boot sector on drive C:
[Clean]        Master Boot Record on disk 0
[Found downloader]         <W32/Banload.E.gen!Eldorado (not disinfectable, generic)>        C:\virus\08-03-22\3.rar->svchost.exe
[Found possible virus]         <W32/VB-Wird-based!Maximus (not disinfectable)>        C:\virus\08-03-22\3.rar->gdisvc.exe->(UPX)
[Clean]        C:\virus\08-03-22\3.rar->top.exe

---------------------------------------------------------------------
Scan ended:        2008-3-22, 15:12:40
Duration:        0:00:01

Scan result:

Scanned files:                 6
Infected objects:         2
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

FP漏一个。。。
刚刚一个帖子里fp连启19个。。。
http://bbs.kafan.cn/viewthread.p ... p;page=1#pid3071893

aerbeisi

红伞复活节休息4天，幸亏有heur顶着。碰到免杀就 了。

无尽藏海

E:\VIRUS\3（22）.rar » RAR » svchost.exe - is OK
E:\VIRUS\3（22）.rar » RAR » gdisvc.exe - a variant of Win32/TrojanClicker.VB.YS trojan
E:\VIRUS\3（22）.rar » RAR » top.exe - a variant of Win32/TrojanClicker.Agent.NCS trojan

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.VB.zpw      

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.36.50

hum

ESET 2个
没报的上报

Palkia

C:\Documents and Settings\Administrator\桌面\3.rar>>gdisvc.exe        TrojanClicker.VB.aio.kubq        木马        还未处理
C:\Documents and Settings\Administrator\桌面\3.rar>>top.exe        Trojan.Adclicker.aeuk        木马        还未处理