每次下载都不同的木马网站(148楼有最新样本下载)

sam.to

141-160，上报卡巴

Hello,

141.int - Trojan-Downloader.Win32.Obfuscated.jj,

142.int - Trojan-Downloader.Win32.Obfuscated.jk,

143.int - Trojan-Downloader.Win32.Obfuscated.jl,

144.int - Trojan-Downloader.Win32.Obfuscated.jm,

145.int - Trojan-Downloader.Win32.Obfuscated.jn,

146.int - Trojan-Downloader.Win32.Obfuscated.jo,

147.int - Trojan-Downloader.Win32.Obfuscated.jp,

148.int - Trojan-Downloader.Win32.Obfuscated.jq,

149.int - Trojan-Downloader.Win32.Obfuscated.jr,

150.int - Trojan-Downloader.Win32.Obfuscated.js,

151.int - Trojan-Downloader.Win32.Obfuscated.jt,

152.int - Trojan-Downloader.Win32.Obfuscated.ju,

153.int - Trojan-Downloader.Win32.Obfuscated.jv,

154.int - Trojan-Downloader.Win32.Obfuscated.jw,

155.int - Trojan-Downloader.Win32.Obfuscated.jx,

156.int - Trojan-Downloader.Win32.Obfuscated.jy,

157.int - Trojan-Downloader.Win32.Obfuscated.jz,

158.int - Trojan-Downloader.Win32.Obfuscated.iw,

159.int - Trojan-Downloader.Win32.Obfuscated.ka,

160.int - Trojan-Downloader.Win32.Obfuscated.kb

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Dmitry Shvetsov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 kato9096 于 2008-4-6 18:50 编辑 ]

tonychan3c

真是很多很毒

挪威的冬天

金山 0

挪威的冬天

继续 0

挪威的冬天

金山 0... 连刷三帖了

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\TRR7'
C:\Documents and Settings\Administrator\My Documents\TRR7\
  121.int
  122.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  123.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  124.int
  125.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  126.int
  127.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  128.int
  129.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  130.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  131.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  132.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  133.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  134.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  135.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  136.int
  137.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  138.int
  139.int
  140.int


End of the scan: 2008年4月5日  23:08
Used time: 00:04 min

The scan has been done completely.

      1 Scanning directories
     20 Files were scanned
     12 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     12 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      8 Files not concerned
      0 Archives were scanned
      0 Warnings
     12 Notes

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\TRR8'
C:\Documents and Settings\Administrator\My Documents\TRR8\
  141.int
  142.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  143.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  144.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  145.int
  146.int
  147.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  148.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  149.int
  150.int
  151.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  152.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  153.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  154.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  155.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  156.int
  157.int
  158.int
  159.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!
  160.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
      [NOTE]      The file was deleted!


End of the scan: 2008年4月5日  23:29
Used time: 00:04 min

The scan has been done completely.

      1 Scanning directories
     20 Files were scanned
     12 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     12 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      8 Files not concerned
      0 Archives were scanned
      0 Warnings
     12 Notes

sam.to

161-180
上报卡巴

上报后已入库

[ 本帖最后由 kato9096 于 2008-4-7 20:22 编辑 ]

sam.to

181-200，上报卡巴

Hello,

161.int - Trojan.Win32.Inject.aqm,
162.int - Trojan.Win32.Inject.aqn,
163.int - Trojan.Win32.Inject.aqo,
164.int - Trojan.Win32.Inject.aqp,
165.int - Trojan.Win32.Inject.aqq,
166.int - Trojan.Win32.Inject.aqr,
167.int - Trojan.Win32.Inject.aqs,
168.int - Trojan.Win32.Inject.aqt,
169.int - Trojan.Win32.Inject.aqu,
170.int - Trojan.Win32.Inject.aqv,
171.int - Trojan.Win32.Inject.aqw,
172.int - Trojan.Win32.Inject.aqx,
173.int - Trojan.Win32.Inject.aqy,
174.int - Trojan.Win32.Inject.aqz,
175.int - Trojan.Win32.Inject.ara,
176.int - Trojan.Win32.Inject.arb,
177.int - Trojan.Win32.Inject.arc,
178.int - Trojan.Win32.Inject.ard,
179.int - Trojan.Win32.Inject.are,
180.int - Trojan.Win32.Inject.arf,
182.int - Trojan.Win32.Inject.arg,
183.int - Trojan.Win32.Inject.arh,
184.int - Trojan.Win32.Inject.ari,
185.int - Trojan.Win32.Inject.arj,
186.int - Trojan.Win32.Inject.ark,
187.int - Trojan.Win32.Inject.arl,
188.int - Trojan.Win32.Inject.arm,
189.int - Trojan.Win32.Inject.arn,
190.int - Trojan.Win32.Inject.aro,
191.int - Trojan.Win32.Inject.arp,
192.int - Trojan.Win32.Inject.arq,
193.int - Trojan.Win32.Inject.arr,
194.int - Trojan.Win32.Inject.ars,
195.int - Trojan.Win32.Inject.art,
196.int - Trojan.Win32.Inject.aru,
197.int - Trojan.Win32.Inject.arv,
198.int - Trojan.Win32.Inject.arw,
199.int - Trojan.Win32.Inject.arx,
200.int - Trojan.Win32.Inject.ary

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

181.int

This file is corrupted.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 kato9096 于 2008-4-6 23:52 编辑 ]

allinwonderi

[Found possible virus]         <W32/Swizzor-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\TRR10.part01.rar->197.int
[Found possible virus]         <W32/Swizzor-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\TRR10.part01.rar->198.int
[Found possible virus]         <W32/Swizzor-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\TRR10.part02.rar->200.int
[Found possible virus]         <W32/Swizzor-based!Maximus (damaged, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\TRR10.part02.rar->181.int
[Found possible virus]         <W32/Swizzor-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\TRR10.part03.rar->183.int
[Found possible virus]         <W32/Swizzor-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\TRR10.part03.rar->184.int
[Found possible virus]         <W32/Swizzor-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\TRR10.part04.rar->186.int
[Found possible virus]         <W32/Swizzor-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\TRR10.part05.rar->188.int
[Found possible virus]         <W32/Swizzor-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\TRR10.part05.rar->189.int
[Found possible virus]         <W32/Swizzor-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\TRR10.part06.rar->191.int
[Found possible virus]         <W32/Swizzor-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\TRR10.part06.rar->192.int
[Found possible virus]         <W32/Swizzor-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\TRR10.part07.rar->194.int
[Found possible virus]         <W32/Swizzor-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\TRR10.part07.rar->195.int

---------------------------------------------------------------------
Scan ended:        2008-4-6, 21:30:05
Duration:        0:00:32

Scan result:

Scanned files:                 13
Infected objects:         13
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------