[病毒样本] 4

显示全部楼层 · 发表于 2008-5-14 21:43:28

上报卡巴,紅傘

Hello.
No malicious software was found in the attached file.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Maslennikov Denis
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

[ 本帖最后由 kato9096 于 2008-5-15 11:47 编辑 ]

显示全部楼层 · 发表于 2008-5-14 21:44:44

C:\Documents and Settings\Administrator\桌面\delautorun.rar>>delautorun\delautorun.bat2 Trojan.DiskAutorun.avy.ivfl 木马还未处理

蠕虫名称:Worm.Win32.AutoRun.cgu
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DELAUTORUN\DELAUTORUN\DELAUTORUN.BAT2
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

[ 本帖最后由 tvuser2007 于 2008-5-14 21:46 编辑 ]

显示全部楼层 · 发表于 2008-5-14 21:48:39

Starting the file scan:

Begin scan in 'E:\AV\delautorun\autorun.inf'
Begin scan in 'E:\AV\delautorun\delautorun.bat2'
E:\AV\delautorun\delautorun.bat2
   [DETECTION] Contains detection pattern of the worm WORM/Autorun.ETF
   [NOTE]    The file was deleted!
Begin scan in 'E:\AV\delautorun\delautorun.ini'
Begin scan in 'E:\AV\delautorun\Player.exe2'

End of the scan: 2008年5月14日  21:50
Used time: 00:12 min

The scan has been done completely.

   0 Scanning directories
   4 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   0 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-5-14 21:49:18

金山毒霸 0

显示全部楼层 · 发表于 2008-5-14 21:54:38

大蜘蛛一个，SEP隔离两个，ESS一个

显示全部楼层 · 发表于 2008-5-14 22:02:38

25019075  autorun.inf  68 Byte  CLEAN
25019076  delautorun.ini  362 Byte  CLEAN
25019077  Player.exe2  316 KB  CLEAN

显示全部楼层 · 发表于 2008-5-14 22:35:02

RS20.44.22未杀！

显示全部楼层 · 发表于 2008-5-14 22:57:32

Filename Result
autorun.inf    CLEAN

The file 'autorun.inf' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Filename Result
delautorun.bat2    MALWARE

The file 'delautorun.bat2' has been determined to be 'MALWARE'. Our analysts named the threat Worm/Autorun.ETF. The term "WORM/" denotes a worm that is able to spread itself for instance over the Internet (using eMail, peer-to-peer networks, IRC networks etc.).Detection is added to our virus definition file (VDF) starting with version 7.00.03.80.
Filename Result
delautorun.ini    CLEAN

The file 'delautorun.ini' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Filename Result
Player.exe2    CLEAN

The file 'Player.exe2' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

显示全部楼层 · 发表于 2008-5-15 11:47:01

Hello.
No malicious software was found in the attached file.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Maslennikov Denis
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2008-5-15 12:02:32

扫描系统区域...
扫描所选择的目录和文件...
对象: delautorun\delautorun.bat2
  在压缩档案里: F:\Virus\delautorun.rar
状态: 已发现病毒
  病毒: Win32:DNSChanger-SL [Trj] (Avast/BD引擎)
对象: delautorun.rar
路径: F:\Virus
状态: 已发现病毒
  病毒: Win32:DNSChanger-SL [Trj] (Avast/BD引擎)
分析完成: 2008-5-15 12:05
已扫描 1 个文件
已发现 1 个感染文件
发现 0 个可疑文件

[ 本帖最后由秋叶濛濛于 2008-5-15 12:03 编辑 ]

[病毒样本] 4

本帖子中包含更多资源

5/0

本帖子中包含更多资源