[病毒样本] 1

显示全部楼层 · 发表于 2008-5-21 19:32:00

kav325 0

显示全部楼层 · 发表于 2008-5-21 20:15:53

McAfee MISS

显示全部楼层 · 发表于 2008-5-21 20:22:17

显示全部楼层 · 发表于 2008-5-21 20:39:27

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\XXXX.rar<RAR>:XXXX.exe <- Variant:Trojan.Psw.Qqrob.Je : No action

Scanned objects : 2

Infected objects : 1

显示全部楼层 · 发表于 2008-5-21 20:40:04

[Found backdoor] <W32/Hupigon.G.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\XXXX.rar->XXXX.exe

---------------------------------------------------------------------
Scan ended: 2008-5-21, 20:39:35
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-5-21 21:23:15

MISS

显示全部楼层 · 发表于 2008-5-21 22:01:01

Hello,

dodolook636.ex

This file is corrupted.

ha_80030.ex - Trojan-Downloader.Win32.QQHelper.bih,
Malware.exe - Trojan.Win32.Kilie.a,
page1.ex - Trojan-PSW.Win32.OnLineGames.aive,
page2.ex - Trojan-PSW.Win32.OnLineGames.aivf

These files are already detected. Please update your antivirus bases.

sethc.exe

No malicious code was found in this file.

svc.exe - Trojan.Win32.Agent.mxt,
tmp.exe - Trojan.Win32.Agent.mxu,
XXXX.exe - Trojan-PSW.Win32.OnLineGames.aivm[:1:]

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: Malware.zip

显示全部楼层 · 发表于 2008-5-21 22:06:40

kv 0

[病毒样本] 1

本帖子中包含更多资源

ArcaVir2008

F-Prot 4.4.4