1小包,有MSN病毒

sam.to

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Winlagons.jw        檔案: C:\Documents and Settings\kato9096\桌面\s\s.exe2


to kl

Hello,

cmyflbsa.ini, gPoYHRqr.ini, gPoYHRqr.ini2, xtivwlgo.ini, yobcgifj.ini

No malicious code were found in these files.

httakpnx.dll - Trojan.Win32.Pakes.cyp,
jfigcboy.dll - Trojan.Win32.Pakes.cyq,
jystocpr.dll - Trojan.Win32.Pakes.cyr,
oglwvitx.dll - Trojan.Win32.Pakes.cyn,
rqRHYoPg.dll - Trojan.Win32.Pakes.cyo

These files are already detected. Please update your antivirus bases.

myPhoto#0033.JPEG_MSN.com2 - Backdoor.Win32.IRCBot.ddv,
pcssvc.exe2 - Backdoor.Win32.IRCBot.ddw

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 kato9096 于 2008-5-26 13:01 编辑 ]

挪威的冬天

金山毒霸

病毒        2008-05-24  00:25:03        病毒在文件D:\Desktop\s\s\pcssvc.exe2中        Win32.Hack.IRCBot.37376        处理成功（操作：删除）       
病毒        2008-05-24  00:25:03        病毒在文件D:\Desktop\s\s\myPhoto-0033.JPEG_MSN.com2中        Win32.Hack.IRCBot.37888        处理成功（操作：删除）

Kitman

清空
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\s'
C:\Documents and Settings\Administrator\桌面\s\httakpnx.dll
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      A backup was created as '48aaf5a4.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\s\jfigcboy.dll
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      A backup was created as '489ff596.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\s\jystocpr.dll
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      A backup was created as '48a9f5a9.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\s\myPhoto-0033.JPEG_MSN.com2
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [NOTE]      A backup was created as '4886f5a9.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\s\oglwvitx.dll
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      A backup was created as '48a2f597.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\s\pcssvc.exe2
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [NOTE]      A backup was created as '48a9f593.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\s\rqRHYoPg.dll
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      A backup was created as '4888f5a1.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\s\s.exe2
  [0] Archive type: RSRC
  --> Object
      [DETECTION] Is the Trojan horse TR/Agent.4096.209
  --> Object
      [DETECTION] Is the Trojan horse TR/Dldr.Winlagons.IT
      [NOTE]      A backup was created as '489bf55e.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!


End of the scan: 2008年5月24日  00:47
Used time: 00:03 min

The scan has been done completely.

      1 Scanning directories
     13 Files were scanned
      9 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      8 files were deleted
      0 files were repaired
      8 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      0 Archives were scanned
      0 Warnings
      8 Notes

醉一生爱妍

剩下的问题：

对象名称	威胁的名称:	最终的状态
C:\Documents and Settings\Administrator\桌面\s[1]\s\myPhoto-0033.JPEG_MSN.com2	Trojan.Delf.Inject.AB	清除失败
C:\Documents and Settings\Administrator\桌面\s[1]\s\pcssvc.exe2	Trojan.Delf.Inject.AB	清除失败

解决的问题：

对象名称	威胁的名称:	最终的状态
C:\Documents and Settings\Administrator\桌面\s[1]\s\s.exe2	Trojan.Agent.AINZ	被删除的

傻猪猪米走鸡

eset miss

红心王子

Date,Virus Name,Virus Type,User,Filename,Scan Type
2008-5-24 9:02:35,TrojanDownloader.ZlobA.ah.ofxc,木马,Administrator,D:\我的文档\桌面\新建文件夹\s\s.exe2,Manual scan

电影结束了

对象: s.exe2
        路径: F:\s
        Status: 已发现病毒
        病毒: Trojan.Agent.AINZ (BD 引擎)

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.ZlobA.ah

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.45.50

BING126

McAfee    s.exe2          generic.dx

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\s.part02.rar<RAR>:s.exe2<DLLRES>:DOWNLOAD0.exe <- Trojan.Downloader.Winlagons.It : Cleaning -> Delete



Scanned objects : 15

Infected objects : 1