运行一病毒随机生成的衍生物，随后发罪魁祸首。

hellobaby

wangjay1980

TO KL

Hello,

1800.exe_ - Backdoor.Win32.Small.dpv,
a1.exe_ - Trojan-Proxy.Win32.Xorpix.ej,
page10.exe_ - Backdoor.Win32.Small.dpw

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: page10.zip
[:1:]

[ 本帖最后由 wangjay1980 于 2008-5-7 23:33 编辑 ]

a750828

McAfee BackDoor-DLQ

allinwonderi

不新了。
[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\新病毒.rar<RAR>:1800.exe <- Trojan.Agent.Ary : No action



Scanned objects : 3

Infected objects : 1

dd2006

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         http://bbs.kafan.cn/attachment.p ... c4&t=1210165856
Information:         Is the Trojan horse TR/PSW.LdPinch.jm1


Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.37, VDF 7.0.4.11

hellobaby

原帖由 allinwonderi 于 2008-5-7 21:04 发表
不新了。
[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\新病毒.rar:1800.exe  

问题是瑞星无视啊。

allinwonderi

应该以红伞和卡巴做标尺比较好，上报的人多，反应比较快。

303898443

卡巴357报

qigang

RS20.43.22未杀！

一凡

Begin scan in 'F:\Sandbox\Administrator\DefaultBox\drive\F\病毒\新病毒.rar'
F:\Sandbox\Administrator\DefaultBox\drive\F\病毒\新病毒.rar
  [0] Archive type: RAR
  --> ￐ￂﾲﾡﾶﾾ\page10.exe
      [DETECTION] Is the Trojan horse TR/PSW.LdPinch.jm1
  --> ￐ￂﾲﾡﾶﾾ\1800.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen