每次下载都不同的木马网站(148楼有最新样本下载)

sam.to

每次下载都不同的木马网站[1,9,14,20,22,30,32,40,41,48,49,54,55,58,59,62,63,70,71,74,75,78,80,82,84,88,89,93,94,96,98,99,100,106,111,116,121,131,133,136,143,148楼有样本下载]


今天上报其中一个:
http://bbs.kafan.cn/viewthread.php?tid=228897

刚刚发现每次下载都不同,现在把它们一一找下来



这裡有20个(1-20)，已上报卡巴

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Namestnikov Yury
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com

[ 本帖最后由 kato9096 于 2008-6-22 15:17 编辑 ]

wangjay1980

来报个到

qigang

刚刚发现每个都次下载都不同,现在把它们一一找下来

有语病！

qigang

上传！

sam.to

Sorry,我是说广东话，请指教

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)'
E:\新建文件夹 (2)\8.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [INFO]      The file was deleted!
E:\新建文件夹 (2)\9.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [INFO]      The file was deleted!
E:\新建文件夹 (2)\10.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [INFO]      The file was deleted!
E:\新建文件夹 (2)\12.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [INFO]      The file was deleted!
E:\新建文件夹 (2)\17.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [INFO]      The file was deleted!
E:\新建文件夹 (2)\18.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [INFO]      The file was deleted!
E:\新建文件夹 (2)\19.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [INFO]      The file was deleted!
E:\新建文件夹 (2)\20.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [INFO]      The file was deleted!
E:\新建文件夹 (2)\2.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [INFO]      The file was deleted!
E:\新建文件夹 (2)\4.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [INFO]      The file was deleted!
E:\新建文件夹 (2)\5.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [INFO]      The file was deleted!
E:\新建文件夹 (2)\6.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [INFO]      The file was deleted!
E:\新建文件夹 (2)\7.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [INFO]      The file was deleted!


End of the scan: 2008年4月4日  23:55
Used time: 01:08 min

The scan has been done completely.

      1 Scanning directories
     20 Files were scanned
     13 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     13 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      7 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

3808925  1.int  400.5 KB  UNDER ANALYSIS
3808926  3.int  607 KB  UNDER ANALYSIS
3808927  11.int  592 KB  UNDER ANALYSIS
3808928  13.int  456 KB  UNDER ANALYSIS
3808929  14.int  399.5 KB  UNDER ANALYSIS
3808930  15.int  434 KB  UNDER ANALYSIS
3808931  16.int  404.5 KB  UNDER ANALYSIS

[ 本帖最后由 Exia 于 2008-4-5 00:00 编辑 ]

qigang

原帖由 kato9096 于 2008-4-4 23:50 发表
Sorry,我是说广东话，请指教

哈哈，rising20.38.40未杀！

广东话，我肯定听不懂了。我是以普通话来衡量的！

sam.to

原帖由 qigang 于 2008-4-4 23:50 发表
上传！

我都说了，每一次下载的文件都不同

sam.to

20-40，再上报卡巴

明天再來．．

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Namestnikov Yury
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com

[ 本帖最后由 kato9096 于 2008-4-5 11:23 编辑 ]

sam.to

修正好了，刚才打错了一个字

[ 本帖最后由 kato9096 于 2008-4-5 00:01 编辑 ]