VT上卡巴扫不出来，MS不像误报！

allinwonderi

VT上卡巴扫不出来，MS不像误报！

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.4.30.0	2008.04.29	-
AntiVir	7.8.0.10	2008.04.29	TR/Zlob.Gen.39
Authentium	4.93.8	2008.04.27	-
Avast	4.8.1169.0	2008.04.29	Win32:Zlob-YT
AVG	7.5.0.516	2008.04.29	BackDoor.Hupigon2.JAO
BitDefender	7.2	2008.04.29	Trojan.Zlob.1.Gen
CAT-QuickHeal	9.50	2008.04.28	-
ClamAV	0.92.1	2008.04.29	-
DrWeb	4.44.0.09170	2008.04.29	BackDoor.Klj
eSafe	7.0.15.0	2008.04.28	Suspicious File
eTrust-Vet	31.3.5744	2008.04.29	-
Ewido	4.0	2008.04.29	Downloader.Zlob
F-Prot	4.4.2.54	2008.04.28	-
F-Secure	6.70.13260.0	2008.04.29	-
FileAdvisor	1	2008.04.29	-
Fortinet	3.14.0.0	2008.04.29	-
Ikarus	T3.1.1.26	2008.04.29	Trojan.Zlob.1
Kaspersky	7.0.0.125	2008.04.29	-
McAfee	5283	2008.04.28	-
Microsoft	1.3408	2008.04.22	Trojan:Win32/Delf.CB
NOD32v2	3062	2008.04.29	a variant of Win32/PSW.QQRob.NAQ
Norman	5.80.02	2008.04.29	-
Panda	9.0.0.4	2008.04.29	Generic Trojan
Prevx1	V2	2008.04.29	Generic.Malware
Rising	20.42.12.00	2008.04.29	Backdoor.Win32.Rpcs.a
Sophos	4.28.0	2008.04.29	Mal/Generic-A
Sunbelt	3.0.1056.0	2008.04.17	-
Symantec	10	2008.04.29	Trojan.Zlob
TheHacker	6.2.92.296	2008.04.29	-
VBA32	3.12.6.5	2008.04.29	suspected of Backdoor.XiaoBird.1
VirusBuster	4.3.26:9	2008.04.29	-
Webwasher-Gateway	6.6.2	2008.04.29	Win32.Malware.gen (suspicious)

                       

Additional information

File size: 455986 bytes

MD5...: a797cf19d6fa552c856a40bbec3b3a11

SHA1..: 8c4dd0a52df4a7aa6b3bc3a338bfd00194069bb2

SHA256: 0df444e691d32136306d5b30b75d96b3e9649fa154bb6cc770f1f8e07af3aa49

SHA512: 5b65d6cc4a9e4b6f8876be324da5132139e955e3b692970f589ea9a49c4afd81 fa270924e4b879aa14e2fd7ec638637d1c47dc18e7f22e933f8303ea179cfc24

PEiD..: -

PEInfo: -

packers: UPX

packers: UPX

packers: PE_Patch.UPX, UPX, UPX, PE_Patch.UPX, UPX

qwer9909

新建文件夹.rar\新建文件夹\Angel.dll;C:\Documents and Settings\Administrator\桌面\新建文件夹.rar;BackDoor.Klj;;
新建文件夹.rar;C:\Documents and Settings\Administrator\桌面;发现压缩文件中有被感染的对象;;

allinwonderi

发重了个样本包。

wangjay1980

好几个都没问题

TO KL 验证

[ 本帖最后由 wangjay1980 于 2008-4-29 22:29 编辑 ]

挪威的冬天

信息        2008-04-29  22:28:51        您此次查毒清除了1个病毒                       
信息        2008-04-29  22:28:51        您此次查毒共查出1个病毒以及危险代码                       
信息        2008-04-29  22:28:51        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件10个                       
信息        2008-04-29  22:28:51        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-04-29  22:28:51        D:\Desktop\D½¨Îļt¼D.rar\新建文件夹\Angel.dll        Win32.Hack.Dll.a.135168        清除成功

wangjay1980

验证完毕

Hello,

Angel.dll - Backdoor.Win32.Vipdataend.sa

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

AVEQT.dll, fixflash.exe_, runassrv.exe_, scmctrl.dll

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Yury Nesmachny
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

sam.to

辛苦了

红心王子

木马名称:Trojan-PSW.Win32.QQRob.dgg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\新建文件夹\ANGEL.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

PC0amera

感谢上报，有反应了

...