疑似Backdoor 更新x3

显示全部楼层 · 发表于 2008-4-24 20:46:03

TO KL

显示全部楼层 · 发表于 2008-4-24 21:34:45

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)\DLLCACHE.rar'
E:\新建文件夹 (2)\DLLCACHE.rar
  [0] Archive type: RAR
  --> DLLCACHE.EXE
   [DETECTION] Is the Trojan horse TR/Agent.30960
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-4-24 21:36:05

驱逐舰:没有发现病毒

显示全部楼层 · 发表于 2008-4-24 21:53:47

2008-4-24 21:53:48 内核文件 'D:\firefox download\bkdr.rar' 已发送到 ESET 进行分析。

显示全部楼层 · 发表于 2008-4-24 21:54:15

D:\firefox download\DLLCACHE.rar > RAR > DLLCACHE.EXE - 未查明的 NewHeur_PE 病毒 - 是已删除对象的一部分

显示全部楼层 · 发表于 2008-4-24 21:58:30

lmc2304.exe
http://research.sunbelt-software.com/ViewMalware.aspx?id=4186387
lmc2305.exe
http://research.sunbelt-software.com/ViewMalware.aspx?id=4186388
lmc2306.exe
http://research.sunbelt-software.com/ViewMalware.aspx?id=4186386

显示全部楼层 · 发表于 2008-4-24 22:46:23

KIS

已删除：病毒 Heur.Downloader (修改) 文件: D:\临时文件\bkdr.rar/lmc2306.exe
已删除：病毒 Heur.Downloader (修改) 文件: D:\临时文件\bkdr.rar/lmc2304.exe
已删除：病毒 Heur.Downloader (修改) 文件: D:\临时文件\bkdr.rar/lmc2305.exe

显示全部楼层 · 发表于 2008-4-24 23:07:06

The file 'lmc2306.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Agent.cxb. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware

The file 'lmc2304.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Agent.cxc. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

The file 'lmc2305.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Agent.cxe. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

显示全部楼层 · 发表于 2008-4-25 00:04:42

Hello,

bak.css - Trojan-Downloader.Win32.Murlo.lw,
erwe.exe_ - Backdoor.Win32.Hupigon.brzs,
hexinddos.exe_ - Rootkit.Win32.KernelBot.g,
lmc2304.exe_, lmc2305.exe_, lmc2306.exe_ - Trojan-Downloader.Win32.Agent.nqv

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

winsrc.dll

This file is corrupted.

Please quote all when answering.

--
Best regards, Ermilov Maxim
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.
[:1:]

显示全部楼层 · 发表于 2008-4-25 09:34:31

D:\Documents and Settings\EKINCHENG\桌面\bkdr.rar » RAR » lmc2306.exe - Win32/TrojanDownloader.Agent.NYB trojan
D:\Documents and Settings\EKINCHENG\桌面\bkdr.rar » RAR » lmc2304.exe - Win32/TrojanDownloader.Agent.NYB trojan
D:\Documents and Settings\EKINCHENG\桌面\bkdr.rar » RAR » lmc2305.exe - Win32/TrojanDownloader.Agent.NYB trojan

[病毒样本] 疑似Backdoor 更新x3

本帖子中包含更多资源

回复 8楼 Nblock 的帖子