三包难缠的毒

显示全部楼层 · 发表于 2008-5-5 19:39:57

I:\virus\list\1\
-[00]-
MS Visual C++ v6.00 (*PE) ............. 466a1.exe    ....110592 2008-05-04
MS VC++ v6.0 {DLL} (*PE) .............. 8461.dll    .....53248 2008-05-04
MS VC++ v6.0 {DLL} (*PE) .............. d221.exe    .....53248 2008-05-04
Masm32 v7.10 {DLL} (*PE) .............. dd1.bmp    ....860160 2008-05-04 --->PE文件

I:\virus\list\3\
-[00]-
*PE Win GUI {Ovl=168954} .............. DODOLO~1.EXE  ....212474 2008-05-05
MS Visual C++ v6.00 (*PE) ............. ha_80057.exe  .....24576 2008-04-23
MS Visual C++ v6.00 (*PE) ............. my8848.exe .....24576 2008-05-04

显示全部楼层 · 发表于 2008-5-5 19:43:58

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： AdWare.Win32.Mnless.bt

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.43.02

显示全部楼层 · 发表于 2008-5-5 20:43:59

微点被搞定了。

显示全部楼层 · 发表于 2008-5-5 20:50:16

Norton360无反应

显示全部楼层 · 发表于 2008-5-5 21:25:36

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\1-2-3.rar<RAR>:SkypeRun_8.exe3<UPX>:SkypeRun_8.exe3<DLLRES>:R_20.exe <- Variant:Adware.Ejik.bh : No action
C:\Documents and Settings\All Users\Documents\Test\1-2-3.rar<RAR>:yoyo1048.exe3<NSIS>:scm.exe <- Downloader.Agent.Nou : No action
C:\Documents and Settings\All Users\Documents\Test\1-2-3.rar<RAR>:yoyo1048.exe3<NSIS>:43.sys <- Downloader.Agent.Nas : No action

Scanned objects : 23

Infected objects : 3

显示全部楼层 · 发表于 2008-5-5 21:32:12

Hello.
New malicious software was found in the attached file.
Its detection will be included in the next update. Thank you for your help.
-----------------
Regards, Vladimir Lebedev
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

[病毒样本] 三包难缠的毒

31/3

回复 6楼 kato9096 的帖子