Downloader 更新x3

显示全部楼层 · 发表于 2008-4-25 17:43:03

红伞 V8 When accessing data from the URL, "http://bbs.kafan.cn/attachment.php?aid=249617"
a virus or unwanted program 'TR/Agent.kqh.2' [trojan] was found.
Action taken: Blocked file

显示全部楼层 · 发表于 2008-4-25 17:43:11

扫描进行于：2008-4-25 17:44:00
扫描日志
NOD32版本 3053 (20080424) NT
命令行： F:\virus\dldr.rar

日期： 25.4.2008 时间：17:44:01
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：F:\virus\dldr.rar
F:\virus\dldr.rar >>RAR >>mc2305.exe - Win32/TrojanClicker.Agent.NBI 木马的变种
F:\virus\dldr.rar >>RAR >>mc2306.exe - Win32/TrojanClicker.Agent.NBI 木马的变种
F:\virus\dldr.rar >>RAR >>mc2304.exe - Win32/TrojanClicker.Agent.NBI 木马的变种
已扫描的文件数目：3
已发现的病毒数目：3
完成时间： 17:44:01 总扫描时间：0 秒 (00:00:00)

显示全部楼层 · 发表于 2008-4-25 17:44:26

2008/4/25 17:43:52 Deleted: Trojan.Win32.Agent.kqh C:\Users\Wesley\Downloads\dldr\mc2306.exe
2008/4/25 17:43:52 Detected: Trojan.Win32.Agent.kqh C:\Users\Wesley\Downloads\dldr\mc2306.exe/PE_Patch.UPX/UPX
2008/4/25 17:43:52 Deleted: Trojan.Win32.Agent.kqh C:\Users\Wesley\Downloads\dldr\mc2305.exe
2008/4/25 17:43:52 Detected: Trojan.Win32.Agent.kqh C:\Users\Wesley\Downloads\dldr\mc2305.exe/PE_Patch.UPX/UPX
2008/4/25 17:43:52 Deleted: Trojan.Win32.Agent.kqh C:\Users\Wesley\Downloads\dldr\mc2304.exe
2008/4/25 17:43:51 Detected: Trojan.Win32.Agent.kqh C:\Users\Wesley\Downloads\dldr\mc2304.exe/PE_Patch.UPX/UPX
2008/4/25 17:43:51 Untreated: Trojan.Win32.Agent.kqh C:\Users\Wesley\Downloads\dldr\mc2305.exe/PE_Patch.UPX/UPX Postponed
2008/4/25 17:43:51 Detected: Trojan.Win32.Agent.kqh C:\Users\Wesley\Downloads\dldr\mc2305.exe/PE_Patch.UPX/UPX
2008/4/25 17:43:51 Untreated: Trojan.Win32.Agent.kqh C:\Users\Wesley\Downloads\dldr\mc2306.exe/PE_Patch.UPX/UPX Postponed
2008/4/25 17:43:51 Detected: Trojan.Win32.Agent.kqh C:\Users\Wesley\Downloads\dldr\mc2306.exe/PE_Patch.UPX/UPX
2008/4/25 17:43:51 Untreated: Trojan.Win32.Agent.kqh C:\Users\Wesley\Downloads\dldr\mc2304.exe/PE_Patch.UPX/UPX Postponed
2008/4/25 17:43:51 Detected: Trojan.Win32.Agent.kqh C:\Users\Wesley\Downloads\dldr\mc2304.exe/PE_Patch.UPX/UPX

显示全部楼层 · 发表于 2008-4-25 17:44:27

Starting the file scan:

Begin scan in 'E:\AV\dldr.rar'
E:\AV\dldr.rar
  [0] Archive type: RAR
  --> mc2305.exe
   [DETECTION] Is the Trojan horse TR/Agent.kqh.2
  --> mc2306.exe
   [DETECTION] Is the Trojan horse TR/Agent.kqh.2
  --> mc2304.exe
   [DETECTION] Is the Trojan horse TR/Agent.kqh.2
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-4-25 17:54:40

IK
I:\virus\样本区\dldr.rar:\mc2305.exe - Signature 'Trojan-Clicker.Win32.Agent.nt' found
I:\virus\样本区\dldr.rar:\mc2306.exe - Signature 'Trojan-Clicker.Win32.Agent.nt' found
I:\virus\样本区\dldr.rar:\mc2304.exe - Signature 'Trojan-Clicker.Win32.Agent.nt' found
I:\virus\样本区\dldr.rar

4 Files scanned
(1 Archiv with 3 files)
3 Signatures found
0 Suspect code-parts found
Used time: 0:00.062

显示全部楼层 · 发表于 2008-4-25 17:56:58

[Found possible virus] <W32/Dialer.TCS-behavior!Maximus (not disinfectable)> C:\test\dldr.rar->mc2305.exe
[Found possible virus] <W32/Dialer.TCS-behavior!Maximus (not disinfectable)> C:\test\dldr.rar->mc2306.exe
[Found possible virus] <W32/Dialer.TCS-behavior!Maximus (not disinfectable)> C:\test\dldr.rar->mc2304.exe

显示全部楼层 · 发表于 2008-4-25 19:45:18

kv 0

显示全部楼层 · 发表于 2008-4-25 19:46:03

金山 0

显示全部楼层 · 发表于 2008-4-25 19:46:43

小A完美的飘过..

[病毒样本] Downloader 更新x3

本帖子中包含更多资源

Kaspersky 2009