[病毒样本] 9

显示全部楼层 · 发表于 2008-5-2 22:41:46

9.zip\5.exe2;C:\Documents and Settings\Administrator\桌面\9.zip;Trojan.DownLoader.24004;;
9.zip\7.exe2;C:\Documents and Settings\Administrator\桌面\9.zip;Win32.HLLW.Autoruner.1858;;
9.zip;C:\Documents and Settings\Administrator\桌面;发现压缩文件中有被感染的对象;;

蜘蛛惨不忍睹

显示全部楼层 · 发表于 2008-5-3 02:20:12

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\9'
C:\Documents and Settings\Administrator\My Documents\9\
  1.exe2
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  2.exe2
  3.exe2
  5.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Delf.KH.1
   [NOTE]    The file was deleted!
  6.exe2
   [DETECTION] Is the Trojan horse TR/Agent.32125
   [NOTE]    The file was deleted!
  7.exe2
[0] Archive type: Runtime Packed
--> Object
      [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
   [NOTE]    The file was deleted!
  8.exe2
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
   [NOTE]    The file was deleted!
  9.exe2
   [DETECTION] Is the Trojan horse TR/Dldr.Losabel.IQ
   [NOTE]    The file was deleted!

End of the scan: 2008年5月2日  11:20
Used time: 00:04 min

The scan has been done completely.

   1 Scanning directories
   8 Files were scanned
   6 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   6 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   0 Archives were scanned
   0 Warnings
   6 Notes

显示全部楼层 · 发表于 2008-5-3 02:21:18

剩下的2个为相同文件
204679 3.exe2 1.28 KB CLEAN

显示全部楼层 · 发表于 2008-5-3 11:53:47

Roboon

显示全部楼层 · 发表于 2008-5-3 20:35:07

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Namestnikov Yury
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2008-5-3 20:35:45

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Delf.dzx 檔案: C:\Documents and Settings\kato9096\桌面\9.zip/5.exe2
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.nyz 檔案: C:\Documents and Settings\kato9096\桌面\9.zip/6.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.nza 檔案: C:\Documents and Settings\kato9096\桌面\9.zip/8.exe2
已刪除: 病毒 Worm.Win32.AutoRun.dld 檔案: C:\Documents and Settings\kato9096\桌面\9.zip/7.exe2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Losabel.iq 檔案: C:\Documents and Settings\kato9096\桌面\9.zip/9.exe2//PE_Patch.PECompact//PecBundle//PECompact
已刪除: 特洛伊木馬程式 Backdoor.Win32.Agent.hia 檔案: C:\Documents and Settings\kato9096\桌面\9.zip/1.exe2//UPX

显示全部楼层 · 发表于 2008-5-3 20:38:09

update McAfee