svchost.exe [MD5:8403D1]

显示全部楼层 · 发表于 2008-4-30 19:28:09

目前只有F-Prot Antivirus和Sophos Antivirus报。

赶紧上报吧！

F-Prot Antivirus Possibly a new variant of W32/VB-Wird-based!Maximus
Sophos Antivirus Mal/VB-G

[ 本帖最后由 zwl2828 于 2008-4-30 19:49 编辑 ]

显示全部楼层 · 发表于 2008-4-30 19:33:34

[:26:] 病毒包呢？？

显示全部楼层 · 发表于 2008-4-30 19:50:07

原帖由 molicn 于 2008-4-30 19:33 发表
[:26:] 病毒包呢？？

漏掉...

显示全部楼层 · 发表于 2008-4-30 19:52:41

vba32 pass

显示全部楼层 · 发表于 2008-4-30 20:02:16

TO KL

Hello,

svchost.exe_ - Worm.Win32.AutoRun.don

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Evgeny Aseev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: svchost.rar

被人抢先报了

[ 本帖最后由 sbbdms 于 2008-4-30 21:44 编辑 ]

显示全部楼层 · 发表于 2008-4-30 20:04:07

McAfee　　MISS

显示全部楼层 · 发表于 2008-4-30 20:08:25

TO ArcaVir

显示全部楼层 · 发表于 2008-4-30 20:24:38

AutoruN.Inf, svchost.exe_ - Worm.Win32.AutoRun.don

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2008-4-30 21:38:20

2008-04-30 21:37:11 创建文件操作:阻止
进程路径:D:\样本\svchost\svchost.exe
文件路径:C:\windows\svchost.exe
触发规则:应用程序规则->自动创建规则->D:\样本\*

2008-04-30 21:37:11 创建文件操作:阻止
进程路径:D:\样本\svchost\svchost.exe
文件路径:C:\windows\system32\msconfig.com
触发规则:应用程序规则->自动创建规则->D:\样本\*

显示全部楼层 · 发表于 2008-4-30 21:45:47

原帖由 sbbdms 于 2008-4-30 20:02 发表
TO KL

Hello,

svchost.exe_ - Worm.Win32.AutoRun.don

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote ...

被我抢了~哈哈

[病毒样本] svchost.exe [MD5:8403D1]

本帖子中包含更多资源

From Kaspersky Lab