大家注意!

显示全部楼层 · 发表于 2008-5-20 13:46:15

kav 325 0

显示全部楼层 · 发表于 2008-5-20 13:46:53

还好..能杀出来了

显示全部楼层 · 发表于 2008-5-20 14:26:17

ESS3.0.658.0
查出7个木马。

显示全部楼层 · 发表于 2008-5-20 14:33:41

C:\Documents and Settings\桌面\360taf.rar
  [0] Archive type: RAR
  --> 360taf\360taf.exe
   [DETECTION] Is the Trojan horse TR/Agent.18944.C.2
  --> 360taf\527748.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 360taf\755176.exe
   [DETECTION] Contains suspicious code HEUR/Malware
--> 360taf\98094671.exe
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
--> 360taf\98094672.exe
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
--> 360taf\Slvce1.exe
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
--> 360taf\Slvce2.exe
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 360taf\txpbeep.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-5-20 17:27:18

木马名称:Trojan.Win32.Genetik.idd

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.938\360TAF\360TAF.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.938\360TAF\TXPBEEP.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\TXPBEEP.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\360TAF\360TAF\527748.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\NTSVC.OCX
2) C:\WINDOWS\SYSTEM32\SEARCH\SMSS.EXE
3) C:\WINDOWS\SYSTEM32\SEARCH\SERVICES.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\360TAF\360TAF\98094671.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\SLVCE2.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\360TAF\360TAF\98094672.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\SLVCE1.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-5-20 18:14:53

KIS2009 0个，天啊！！

显示全部楼层 · 发表于 2008-5-20 19:55:37

TO KL 验证

Hello,

360taf.exe_ - Backdoor.Win32.Agent.inu,
527748.exe_ - Trojan-Downloader.Win32.Agent.puf,
755176.exe_, txpbeep.exe_ - Trojan.Win32.Agent.mws,
98094671.exe_, 98094672.exe_, Slvce1.exe_, Slvce2.exe_ - Backdoor.Win32.Agent.inv

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Goncharov Ilya
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: 360taf.rar

[:1:]

[ 本帖最后由 wangjay1980 于 2008-5-20 22:38 编辑 ]

显示全部楼层 · 发表于 2008-5-20 19:57:22

扫描系统区域...
扫描所选择的目录和文件...
对象: 360taf\360taf.exe
在压缩档案里: F:\360taf.rar
Status: 已发现病毒
病毒: Trojan.Generic.242072 (BD 引擎)
对象: 360taf\755176.exe
在压缩档案里: F:\360taf.rar
Status: 已发现病毒
病毒: Generic.Malware.Fdld!prn.F4488DB6 (BD 引擎)
对象: 360taf\98094671.exe
在压缩档案里: F:\360taf.rar
Status: 已发现病毒
病毒: GenPack:Trojan.Zlob.2.Gen (BD 引擎)
对象: 360taf\98094672.exe
在压缩档案里: F:\360taf.rar
Status: 已发现病毒
病毒: GenPack:Trojan.Zlob.2.Gen (BD 引擎)
对象: 360taf\Slvce1.exe
在压缩档案里: F:\360taf.rar
Status: 已发现病毒
病毒: GenPack:Trojan.Zlob.2.Gen (BD 引擎)
对象: 360taf\Slvce2.exe
在压缩档案里: F:\360taf.rar
Status: 已发现病毒
病毒: GenPack:Trojan.Zlob.2.Gen (BD 引擎)
对象: 360taf\txpbeep.exe
在压缩档案里: F:\360taf.rar
Status: 已发现病毒
病毒: Generic.Malware.Fdld!prn.F4488DB6 (BD 引擎)

显示全部楼层 · 发表于 2008-5-20 20:41:51

[Found security risk] <W32/SYStroj.G.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\360taf.rar->360taf\360taf.exe->rsrcPE->(Klone.AF)
[Found security risk] <W32/QQhelper.C.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\360taf.rar->360taf\755176.exe
[Found security risk] <W32/QQhelper.C.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\360taf.rar->360taf\98094671.exe->(UPX)
[Found security risk] <W32/QQhelper.C.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\360taf.rar->360taf\98094672.exe->(UPX)
[Found security risk] <W32/QQhelper.C.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\360taf.rar->360taf\Slvce1.exe->(UPX)
[Found security risk] <W32/QQhelper.C.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\360taf.rar->360taf\Slvce2.exe->(UPX)
[Found security risk] <W32/QQhelper.C.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\360taf.rar->360taf\txpbeep.exe

---------------------------------------------------------------------
Scan ended: 2008-5-20, 20:41:37
Duration: 0:00:03

Scan result:

Scanned files:    6
Infected objects:    7
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-5-20 20:42:20

MISS

[病毒样本] 大家注意!

本帖子中包含更多资源

本帖子中包含更多资源

F-Prot 4.4.4

ArcaVir2008