[病毒样本] 3

显示全部楼层 · 发表于 2008-6-3 01:03:33

已刪除: 病毒 Worm.Win32.Downloader.lv 檔案: C:\Documents and Settings\kato9096\桌面\病毒.rar/~tmp6717.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.ltt 檔案: C:\Documents and Settings\kato9096\桌面\病毒.rar/014[1].exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Small.whj 檔案: C:\Documents and Settings\kato9096\桌面\病毒.rar/e[1].exe//FSG

Download:
http://bbs.kafan.cn/attachment.p ... 1b&t=1212425988

soruce:
http://bbs.kafan.cn/viewthread.php?tid=262036

Hello,

DLL.dll, time.batk, winsys.exek, winsys.inf

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 kato9096 于 2008-6-3 18:41 编辑 ]

显示全部楼层 · 发表于 2008-6-3 01:55:24

楼主的帖子没有主题啊

显示全部楼层 · 发表于 2008-6-3 03:24:08

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\病毒.rar'
C:\Documents and Settings\Administrator\桌面\病毒.rar
  [0] Archive type: RAR
--> ~tmp6717.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
--> 014[1].exe
      [DETECTION] Is the Trojan horse TR/Agent.BHQ
  --> e[1].exe
   [DETECTION] Is the Trojan horse TR/Dldr.Small.whj
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-6-3 08:30:12

扫描系统区域...
扫描所选择的目录和文件...
对象: ~tmp6717.exe
在压缩档案里: F:\病毒.rar
Status: 已发现病毒
病毒: Worm.Win32.Downloader.lv (KAV 引擎), Trojan.Downloader.JKAY (BD 引擎)
对象: 014[1].exe
在压缩档案里: F:\病毒.rar
Status: 已发现病毒
病毒: Trojan.Win32.Agent.ltt (KAV 引擎), Trojan.Crypt.DJ (BD 引擎)
对象: e[1].exe
在压缩档案里: F:\病毒.rar
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Small.whj (KAV 引擎), DeepScan:Generic.Malware.dld!!.6642545A (BD 引擎)

显示全部楼层 · 发表于 2008-6-3 09:55:17

木马名称:Trojan.Win32.Agent.nar
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\病毒\014[1].EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-6-3 09:58:21

显示全部楼层 · 发表于 2008-6-3 12:34:17

病毒 2008-06-03  12:34:01 C:\Documents and Settings\Administrator\桌面\病毒.rar\e[1].exe Win32.TrojDownloader.Small.24576 跳过，未处理
病毒 2008-06-03  12:34:01 C:\Documents and Settings\Administrator\桌面\病毒.rar\014[1].exe Win32.Troj.Agent.lt.200704 跳过，未处理
病毒 2008-06-03  12:34:01 C:\Documents and Settings\Administrator\桌面\病毒.rar\~tmp6717.exe Worm.Downloader.lv.135168 跳过，未处理

显示全部楼层 · 发表于 2008-6-3 12:47:33

F-Prot

显示全部楼层 · 发表于 2008-6-3 18:41:38

Hello,

DLL.dll, time.batk, winsys.exek, winsys.inf

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-6-3 18:43:18

Filename Result
DLL.dll    CLEAN

The file 'DLL.dll' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Filename Result
time.bat3    CLEAN

The file 'time.bat3' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Filename Result
winsys.exe3    CLEAN

The file 'winsys.exe3' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Filename Result
winsys.inf    CLEAN

The file 'winsys.inf' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Filename Result
winsyy.sys    MALWARE

[病毒样本] 3

本帖子中包含更多资源

本帖子中包含更多资源

3

本帖子中包含更多资源