四大金刚

ck893210

A&b&C&D

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\a'
C:\Documents and Settings\Administrator\My Documents\a\
  a.dat
      [DETECTION] Contains detection pattern of the dropper DR/Dldr.VB.dht.4
      [NOTE]      The file was deleted!
  b.dat
  c.dat
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [NOTE]      The file was deleted!
  d.dat


End of the scan: 2008年4月18日  21:06
Used time: 00:04 min

The scan has been done completely.

      1 Scanning directories
      4 Files were scanned
      2 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      2 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      0 Archives were scanned
      0 Warnings
      2 Notes

醉一生爱妍

江民杀毒软件报告文件
北京江民新科技术有限公司
扫描引擎 11.00.703
病毒库日期 2008-04-18
更新日期 2008-04-04
扫描目标 C:\Documents and Settings\Administrator\桌面\a\
开始时间 2008-04-04 01:37:37
正常结束。
扫描结果:
                 文件数 :4                                   病毒体 :0         
                   删除 :0                                     解毒 :0         
    扫描速度(千字节/秒) :1905                              扫描时间 :00:00:01
    扫描文件速度(个/秒) :4
    - - - - -   - - - - - - -   - - - - - - -    - - - - - - -    - - - - - - -     - - - - - - -   - - - - -

无尽藏海

19:04:2008 12:16:03 SEARCHTASK "USER_DEFINED" started...
scan item: E:\VIRUS\四大金刚
Directory scanned(filestreams): E:\VIRUS\四大金刚
File scanned: E:\VIRUS\四大金刚\a.dat - SIGNATURE FOUND "Trojan-Downloader.Win32.VB.awj"
File scanned: E:\VIRUS\四大金刚\b.dat
File scanned: E:\VIRUS\四大金刚\c.dat - SIGNATURE FOUND "Trojan-Downloader.Win32.Small.uny"
File scanned: E:\VIRUS\四大金刚\d.dat - SIGNATURE FOUND "Virus.Win32.VB.FXE"
19:04:2008 12:16:04 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 1
Files scanned: 4
Virus found: 3
----------------------------------------------------

wangjay1980

to kl

微点卫士

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.KAFAN\桌面\B.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\GEBSRSIX.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.KAFAN\桌面\C.EXE
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.KAFAN\桌面\C.EXE
是否删除病毒程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.KAFAN\桌面\D.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.KAFAN\SVCHOST.EXE
是否删除木马程序及其衍生物?

a.exe运行时错误

wjzdw

a。exe可以运行~~

wangjay1980

Hello,

9kgen_up.exe_ - Trojan.Win32.Obfuscated.yn,
d.dat - Trojan.Win32.Pakes.crp,
upmdb.jpg_ - Trojan-PSW.Win32.OnLineGames.abgd

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

b.dat - not-a-virus:AdWare.Win32.Virtumonde.pko

This file is an Advertizing Tool, It's detection will be included in the next
update of extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

cc.exe_

No malicious code was found in this file.

Please quote all when answering.

--
Best regards, Yury Nesmachny
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: d.zip
[:1:]

promised

C:\ABC\ABC\a.dat - 特征码 'Trojan-Downloader.Win32.VB.awj' 被发现
C:\ABC\ABC\b.dat - 特征码 'Trojan.Win32.Vundo.C' 被发现
C:\ABC\ABC\c.dat - 特征码 'Trojan-Downloader.Win32.Small.uny' 被发现
C:\ABC\ABC\d.dat - 特征码 'Virus.Win32.VB.FXE' 被发现

        4 文件被扫描
          (0 压缩档 0 文件)
        4 特征码被侦测
        0 可疑代码段被发现
        耗时: 0:00.046

qigang

rising20.40.52未杀！