[病毒样本] 3

显示全部楼层 · 发表于 2008-4-6 23:20:03

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Delf.dbe 檔案: C:\Documents and Settings\kato9096\桌面\3.zip/20071121mzQQmmdd.zip/鎊赽QQ躂鎮湮聒/鎊赽QQ躂鎮湮聒.exe
已刪除: 惡意軟體 Constructor.Win32.Agent.ca 檔案: C:\Documents and Settings\kato9096\桌面\3.zip/200711132213268571.rar/俇藝QQ湮聒諍盓葆躇鎢唳\俇藝QQ湮聒諍盓葆躇鎢唳\俇藝QQ湮聒諍盓葆躇鎢唳.exe

上报卡巴

Hello,

360tray.exe_ - Backdoor.Win32.Hupigon.bnai

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.
Other files are clean.

Please quote all when answering.

--
Best regards, Evgeny Aseev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 kato9096 于 2008-4-7 00:29 编辑 ]

显示全部楼层 · 发表于 2008-4-6 23:26:46

Begin scan in 'C:\桌面'
C:\桌面\200711132213268571.rar
  [0] Archive type: RAR
  --> ÍêÃÀQQ´óµÁ½ØÈ¡Ö§¸¶ÃÜÂë°æ\ÍêÃÀQQ´óµÁ½ØÈ¡Ö§¸¶ÃÜÂë°æ\ÍêÃÀQQ´óµÁ½ØÈ¡Ö§¸¶ÃÜÂë°æ.exe
   [DETECTION] Contains detection pattern of the construction kit KIT/Agent.CA
   [WARNING] The file was ignored!
C:\桌面\20071121mzQQmmdd.zip
  [0] Archive type: ZIP
  --> Âé×ÓQQÄ¾Âí´óµÁ/Âé×ÓQQÄ¾Âí´óµÁ.exe
   [DETECTION] Is the Trojan horse TR/Dldr.VB.bsz
   [WARNING] The file was ignored!
C:\桌面\QQ2007[&amp.rar
  [0] Archive type: RAR
  --> ½ðºüQQ2007´óµÁ[ÌÞ³ýºóÃÅÊÕÐÅ--1010ÃâÉ±¼ÓÇ¿°æ]\½ðºüQQ2007´óµÁ.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
   [WARNING] The file was ignored!

End of the scan: 2008年4月6日  23:26
Used time: 00:14 min

The scan has been done completely.

   1 Scanning directories
   35 Files were scanned
   2 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   33 Files not concerned
   3 Archives were scanned
   3 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-4-6 23:27:43

C:\Documents and Settings\Don johnson\桌面\桌面\200711132213268571.rar » RAR » 完美QQ大盗截取支付密码版\完美QQ大盗截取支付密码版\完美QQ大盗截取支付密码版.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Don johnson\桌面\桌面\20071121mzQQmmdd.zip » ZIP » 麻子QQ木马大盗/麻子QQ木马大盗.exe - probably unknown NewHeur_PE virus

显示全部楼层 · 发表于 2008-4-6 23:49:25

病毒： Trojan.DL.Win32.VB.ykp
病毒： Trojan.DL.Win32.VB.ykp
病毒： Constructor.Win32.Agent.nij

显示全部楼层 · 发表于 2008-4-7 00:29:50

Other files are clean.

Please quote all when answering.

--
Best regards, Evgeny Aseev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

显示全部楼层 · 发表于 2008-4-7 00:37:57

[Found Trojan] <W32/Trojan2.RYK (exact, not disinfectable)> C:\test\pwe\200711132213268571.rar->完美QQ大盗截取支付密码版\完美QQ大盗截取支付密码版\完美QQ大盗截取支付密码版.exe
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\pwe\20071121mzQQmmdd.zip->麻子QQ木马大盗/麻子QQ木马大盗.exe-> rsrcPE->(FSG)->(PE_Patch.MaskPE)

显示全部楼层 · 发表于 2008-4-7 13:10:44

信息 2008-04-07  13:09:27 您此次查毒清除了2个病毒
信息 2008-04-07  13:09:27 您此次查毒共查出2个病毒以及危险代码
信息 2008-04-07  13:09:27 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件42个
信息 2008-04-07  13:09:27 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-04-07  13:09:27 D:\Desktop\×àÃæ\QQ2007[&amp.rar\金狐QQ2007大盗[剔除后门收信--1010免杀加强版]\金狐QQ2007大盗.exe Win32.Packed.MaskPE 清除成功
病毒 2008-04-07  13:09:26 D:\Desktop\×àÃæ\200711132213268571.rar\完美QQ大盗截取支付密码版\完美QQ大盗截取支付密码版\完美QQ大盗截取支付密码版.exe Win32.PSWTroj.QQPass.qq.1093632 清除成功

显示全部楼层 · 发表于 2008-4-7 13:39:40

木马名称:Trojan-Downloader.Win32.Delf.iiq
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面[1]\20071121MZQQMMDD\麻子QQ木马大盗\麻子QQ木马大盗.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

恶意程序名称:Constructor.Win32.Agent.x
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面[1]\200711132213268571\完美QQ大盗截取支付密码版\完美QQ大盗截取支付密码版\完美QQ大盗截取支付密码版.EXE
是恶意程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-4-7 19:58:58

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.VB.ykp
病毒： Trojan.DL.Win32.VB.ykp
病毒： Constructor.Win32.Agent.nij

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.39.01

显示全部楼层 · 发表于 2008-4-7 20:52:48

桌面.part3.rar (75.97 KB)
2008-4-6 23:20, 下载次数: 28
我FS 711 4月7日最新版本没报。

[病毒样本] 3

本帖子中包含更多资源

本帖子中包含更多资源

36/3