楼主: sam.to
收起左侧

[病毒样本] 每次下载都不同的木马网站(148楼有最新样本下载)

[复制链接]
sam.to
 楼主| 发表于 2008-5-1 16:55:04 | 显示全部楼层
Hello.
New malicious software was found in the attached file.
It's detection will be included as soon as possible. Thank you for your help.
-----------------
Regards, Yury Nesmachny
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com

[ 本帖最后由 kato9096 于 2008-5-1 16:57 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
qigang
发表于 2008-5-1 18:38:59 | 显示全部楼层

7/0

原帖由 kato9096 于 2008-4-25 21:05 发表
599-605,上报卡巴

599.int, 600.int, 601.int, 602.int, 603.int, 604.int, 605.int

These files will be detected as soon as possible.

Please quote all when answering.
...





RS20.42.30未杀!
qigang
发表于 2008-5-1 18:42:26 | 显示全部楼层

10/0

原帖由 kato9096 于 2008-5-1 16:55 发表
Hello.
New malicious software was found in the attached file.
It's detection will be included as soon as possible. Thank you for your help.
-----------------
Regards, Yury Nesmachny
Virus Analys ...




RS20.42.30未杀!
Exia 该用户已被删除
发表于 2008-5-4 07:14:44 | 显示全部楼层

回复 111楼 kato9096 的帖子

25009528  606.int  424 KB  MALWARE
25009529  607.int  442.5 KB  MALWARE
25009530  608.int  406.5 KB  MALWARE
25009531  609.int  403 KB  MALWARE
25009532  610.int  451.5 KB  MALWARE
25009533  611.int  427 KB  MALWARE
25009534  612.int  450.5 KB  MALWARE
25009535  613.int  440.5 KB  MALWARE
25009536  614.int  458 KB  MALWARE
25007136  615.int  450.5 KB  CLEAN

[ 本帖最后由 Exia 于 2008-5-6 15:31 编辑 ]
Roboon
发表于 2008-5-4 13:39:37 | 显示全部楼层
Roboon:算了
sam.to
 楼主| 发表于 2008-5-31 23:54:50 | 显示全部楼层
Hello,

616.int - Trojan-Downloader.Win32.Obfuscated.zd,
617.int - Trojan-Downloader.Win32.Obfuscated.ze,
618.int - Trojan-Downloader.Win32.Obfuscated.zf,
619.int - Trojan-Downloader.Win32.Obfuscated.zg,
622.int - Trojan-Downloader.Win32.Obfuscated.zh,
623.int - Trojan-Downloader.Win32.Obfuscated.zi,
624.int - Trojan-Downloader.Win32.Obfuscated.zj,
625.int - Trojan-Downloader.Win32.Obfuscated.zk,
626.int - Trojan-Downloader.Win32.Obfuscated.zm,
629.int - Trojan-Downloader.Win32.Obfuscated.zl,
633.int - Trojan-Downloader.Win32.Obfuscated.zn,
634.int - Trojan-Downloader.Win32.Obfuscated.zo

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

620.int, 621.int, 630.int, 632.int

No malicious code were found in these files.

627.int - Trojan-Downloader.Win32.Injecter.pt,
628.int - Trojan.Win32.Inject.cft,
631.int - Trojan-Downloader.Win32.Obfuscated.wi

These files are already detected. Please update your antivirus bases.

Please quote all when answering.

--
Best regards, Kirill Erakhtin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x

评分

参与人数 1经验 +5 收起 理由
qianwenxiang + 5 辛苦了~

查看全部评分

wangjay1980
发表于 2008-6-1 00:02:36 | 显示全部楼层
晕倒。。。

这个帖子居然还在啊
sam.to
 楼主| 发表于 2008-6-1 00:52:33 | 显示全部楼层

回复 116楼 kato9096 的帖子

Begin scan in 'H:\TRR\TRR22'
H:\TRR\TRR22\9kgen_up\620.int
      [DETECTION] Is the Trojan horse TR/Agent.488448
      [NOTE]      The file was deleted!
H:\TRR\TRR22\9kgen_up\627.int
      [DETECTION] Is the Trojan horse TR/Dldr.Injecter.PT
      [NOTE]      The file was deleted!
H:\TRR\TRR22\9kgen_up\631.int
      [DETECTION] Is the Trojan horse TR/Swizzor.XO
      [NOTE]      The file was deleted!


End of the scan: Sunday,1 June 2008  00:52
Used time: 00:08 min

The scan has been done completely.

      2 Scanning directories
     19 Files were scanned
      3 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      3 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     16 Files not concerned
      0 Archives were scanned
      0 Warnings
      3 Notes

to antivir


25033431          616.int          437 KB          UNDER ANALYSIS
25033432          617.int          449 KB          UNDER ANALYSIS
25033433          618.int          450 KB          UNDER ANALYSIS
25033434          619.int          424.5 KB          UNDER ANALYSIS
25033435          621.int          403.5 KB          UNDER ANALYSIS
25033436          622.int          422 KB          UNDER ANALYSIS
25033437          623.int          462.5 KB          UNDER ANALYSIS
25033438          624.int          424.5 KB          UNDER ANALYSIS
25033439          625.int          445 KB          UNDER ANALYSIS
25033440          626.int          419.5 KB          UNDER ANALYSIS
25033441          628.int          439 KB          UNDER ANALYSIS
25033442          629.int          448.5 KB          UNDER ANALYSIS
25033443          630.int          436.5 KB          UNDER ANALYSIS
25033444          632.int          423 KB          UNDER ANALYSIS
25033445          633.int          435 KB          UNDER ANALYSIS
25033446          634.int          395 KB          UNDER ANALYSIS


Filename         Result
616.int          MALWARE

The file '616.int' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Obfuscated.ZD. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.
Filename         Result
617.int          MALWARE

The file '617.int' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Obfuscated.ZE. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.
Filename         Result
618.int          MALWARE

The file '618.int' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Obfuscated.ZF. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.
Filename         Result
619.int          MALWARE

The file '619.int' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Obfuscated.ZG. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.
Filename         Result
621.int          MALWARE

The file '621.int' has been determined to be 'MALWARE'. Our analysts named the threat TR/Inject.IY. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.
Filename         Result
622.int          MALWARE

The file '622.int' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Obfuscated.ZH. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.
Filename         Result
623.int          MALWARE

The file '623.int' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Obfuscated.ZI. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.
Filename         Result
624.int          MALWARE

The file '624.int' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Obfuscated.ZJ. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.
Filename         Result
625.int          MALWARE

The file '625.int' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Obfuscated.ZK. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.
Filename         Result
626.int          MALWARE

The file '626.int' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Obfuscated.ZM. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.
Filename         Result
628.int          MALWARE

The file '628.int' has been determined to be 'MALWARE'. Our analysts named the threat TR/Inject.cft. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.
Filename         Result
629.int          MALWARE

The file '629.int' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Obfuscated.ZL. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.
Filename         Result
630.int          MALWARE

The file '630.int' has been determined to be 'MALWARE'. Our analysts named the threat TR/Inject.JB. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.
Filename         Result
632.int          MALWARE

The file '632.int' has been determined to be 'MALWARE'. Our analysts named the threat TR/Inject.JC. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.
Filename         Result
633.int          MALWARE

The file '633.int' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Obfuscated.ZN. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.
Filename         Result
634.int          MALWARE

The file '634.int' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Obfuscated.ZO. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.122.

[ 本帖最后由 kato9096 于 2008-6-2 21:34 编辑 ]
sun88990
发表于 2008-6-1 10:28:50 | 显示全部楼层
Update McAfee...
qigang
发表于 2008-6-1 20:09:15 | 显示全部楼层

19/0

原帖由 kato9096 于 2008-5-31 23:54 发表
Hello,

616.int - Trojan-Downloader.Win32.Obfuscated.zd,
617.int - Trojan-Downloader.Win32.Obfuscated.ze,
618.int - Trojan-Downloader.Win32.Obfuscated.zf,
619.int - Trojan-Downloader.Win32.Ob ...


RS20.46.62未杀!
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-15 03:58 , Processed in 0.089586 second(s), 16 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表