2

tonger2003

SIGKILL

2008-4-13,20:11:42 [WARNING]  Suspicious file: Contains suspicious code HEUR/Malware!
  C:\Documents and Settings\Administrator\Application Data\Orca Browser\Profiles\Cache\E8480B8Dd01
  Archive: RAR : x_unpacked.exe
2008-4-13,20:11:41 [WARNING]  Suspicious file: Contains suspicious code HEUR/Malware!
  C:\Documents and Settings\Administrator\Local Settings\Temp\2y8sw3ib.rar
  Archive: RAR : x_unpacked.exe
      [INFO] The file will be moved to quarantine.

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)\桌面.rar'
E:\新建文件夹 (2)\桌面.rar
  [0] Archive type: RAR
  --> x_unpacked.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> x.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!

yunhan123

杀1

wangjay1980

to kl

Hello.

This file is already detected. Please update your bases.

--
Regards, Ilya Goncharov
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com


> Attachment: x.rar


[ 本帖最后由 wangjay1980 于 2008-4-13 22:47 编辑 ]

aerbeisi

[Found possible security risk]         <W32/Heuristic-CSU!Eldorado (dropper, damaged, not disinfectable)>        C:\test\桌面.rar->x_unpacked.exe->(embedded)
[Found backdoor]         <W32/Rbot.A.gen!Eldorado (not disinfectable, generic)>        C:\test\桌面.rar->x.exe

马力

驱逐舰不报

qigang

rising20.39.61未杀！

qwer9909

File scanned: C:\Documents and Settings\Administrator\桌面\桌面.rar - SIGNATURE FOUND "Worm.Win32.Downloader.am"

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:x_unpacked.exe <- Trojan.Agent.Fb : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:x.exe<UPack>:x.exe <- Variant:Trojan.Agent.Fb : No action



Scanned objects : 5

Infected objects : 2