3

ck893210

..................

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)\080411.rar'
Begin scan in 'E:\新建文件夹 (2)\a.rar'
E:\新建文件夹 (2)\a.rar
  [0] Archive type: RAR
  --> a.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [INFO]      The file was deleted!
Begin scan in 'E:\新建文件夹 (2)\b.rar'
E:\新建文件夹 (2)\b.rar
  [0] Archive type: RAR
  --> b.exe
      [DETECTION] Is the Trojan horse TR/Vundo.Gen
      [INFO]      The file was deleted!

aerbeisi

C:\test\aaa\080411.rar ?RAR ?080411.exe - a variant of Win32/TrojanClicker.VB.NCJ 木马
C:\test\aaa\a.rar ?RAR ?a.exe - a variant of Win32/TrojanDownloader.Small.IAW 木马

cxgkings

kis 7.0      080411 miss

z2665

瑞星 0
红伞
     Begin scan in 'C:\Documents and Settings\Administrator\桌面\a.rar'
C:\Documents and Settings\Administrator\桌面\a.rar
  [0] Archive type: RAR
  --> a.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING]   The file was ignored!

Joker

a的产物

[ 本帖最后由 Joker 于 2008-4-13 14:57 编辑 ]

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)\2.rar'
E:\新建文件夹 (2)\2.rar
  [0] Archive type: RAR
  --> mrofinu1324.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [INFO]      The file was deleted!

The file '17PHolmes1324.exe' has been determined to be 'CLEAN'.

[ 本帖最后由 Exia 于 2008-4-13 14:58 编辑 ]

wangjay1980

TO KL

Hello.
Trojan-Clicker.Win32.Pamere.dm
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Yury Nesmachny
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com


> Attachment: 080411.zip[:1:]

[ 本帖最后由 wangjay1980 于 2008-4-13 16:46 编辑 ]

weconnect

080411的微点也没有发现，而且运行后，系统无任何反映

Joker

原帖由 weconnect 于 2008-4-13 14:56 发表
080411的微点也没有发现，而且运行后，系统无任何反映

应该是下载者。有联网。但是半天么东西出现