[病毒样本] 1

显示全部楼层 · 发表于 2008-5-12 20:01:41

Starting the file scan:

Begin scan in 'C:\Documents and Settings\kato9096\桌面\複製 -Server.rar'
C:\Documents and Settings\kato9096\桌面\複製 -Server.rar
  [0] Archive type: RAR
  --> Server.exe
   [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.6912
   [WARNING] The file was ignored!

上报卡巴

Hello.
New malicious software was found in the attached file.
Backdoor.Win32.Agent.iba
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Vyacheslav Zakorzhevsky
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

[ 本帖最后由 kato9096 于 2008-5-12 20:53 编辑 ]

显示全部楼层 · 发表于 2008-5-12 20:23:26

不错的东西

2008-5-12 JAY20:12:58 Server.exe  Process exit C:\Documents and Settings\Owner\桌面\Server.exe
2008-5-12 JAY20:12:58 Server.exe Denied: KLSystemData/KLSystemFiles/Drivers Delete C:\WINDOWS\system32\drivers\beep.sys
2008-5-12 JAY20:12:31 Server.exe Detected: Trojan.generic  C:\DOCUMENTS AND SETTINGS\OWNER\桌面\SERVER.EXE
2008-5-12 JAY20:12:31 Server.exe  Create C:\WINDOWS\system32\360tay.exe
2008-5-12 JAY20:12:31 Server.exe : KLSystemData/FD-C/ Create C:\WINDOWS\system32\360tay.exe
2008-5-12 JAY20:12:31 Server.exe : KLSystemData/KLSystemFiles/SystemExe Create C:\WINDOWS\system32\360tay.exe
2008-5-12 JAY20:12:29 Server.exe  Process start C:\Documents and Settings\Owner\桌面\Server.exe

生成物360

显示全部楼层 · 发表于 2008-5-12 20:25:34

Starting the file scan:

Begin scan in 'E:\AV\360tay.zip'
E:\AV\360tay.zip
  [0] Archive type: ZIP
  --> 360tay.exe
   [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.6912
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-5-12 20:29:19

kv 0

显示全部楼层 · 发表于 2008-5-12 20:30:48

RS20.44.02未杀！

显示全部楼层 · 发表于 2008-5-12 20:41:10

TF干掉...
BD挂...

显示全部楼层 · 发表于 2008-5-12 20:53:24

Hello.
New malicious software was found in the attached file.
Backdoor.Win32.Agent.iba
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Vyacheslav Zakorzhevsky
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2008-5-12 21:00:40

今天不错

显示全部楼层 · 发表于 2008-5-12 21:00:58

D:\firefox download\Server.rar > RAR > Server.exe2 - 可能是 Win32/Genetik 特洛伊木马的变种 - 是已删除对象的一部分
D:\firefox download\360tay(2).zip > ZIP > 360tay.exe - 可能是 Win32/Genetik 特洛伊木马的变种 - 是已删除对象的一部分

显示全部楼层 · 发表于 2008-5-13 17:23:12

原帖由 wangjay1980 于 2008-5-12 20:23 发表
不错的东西

2008-5-12 JAY20:12:58 Server.exe Process exit C:\Documents and Settings\Owner\桌面\Server.exe
2008-5-12 JAY20:12:58 Server.exe Denied: KLSystemData/KLSystemFiles/Drivers Delete C:\WIN ...

卡巴:
Backdoor.Win32.Agent.iba

[病毒样本] 1

本帖子中包含更多资源

本帖子中包含更多资源

回复 2楼 wangjay1980 的帖子

3/0

本帖子中包含更多资源