notepad.exe

显示全部楼层 · 发表于 2008-6-3 21:14:21

金山毒霸 0

显示全部楼层 · 发表于 2008-6-3 21:15:45

[Found security risk] <W32/Virtumonde.T.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\notepad.zip->notepad.exe

---------------------------------------------------------------------
Scan ended: 2008-6-3, 21:15:12
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------
[:1:]

显示全部楼层 · 发表于 2008-6-3 21:16:43

显示全部楼层 · 发表于 2008-6-3 21:36:31

eav drweb TIS2008 都飘了

显示全部楼层 · 发表于 2008-6-3 22:58:58

Hello,

notepad.exe_ - Trojan.Win32.DNSChanger.dvs

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Namestnikov Yury
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-6-3 23:11:21

不是不用分析，是在你之前有人提交过相同的文件罢了

显示全部楼层 · 发表于 2008-6-4 00:02:49

原來如此

显示全部楼层 · 发表于 2008-6-4 00:09:34

http://www.threatexpert.com/repo ... cf0c9bb1ee975b4d127

显示全部楼层 · 发表于 2008-6-4 13:47:08

http://bbs.kafan.cn/attachment.php?aid=
277522&k=7666c2497a2b68e340b23e93767dcc4
a&t=1212558348

The following error was encountered:

The requested object is INFECTED with the following viruses: Trojan.Win32.DNSChanger.dvs

显示全部楼层 · 发表于 2008-6-4 15:50:47

Antivirus Version Last Update Result
AhnLab-V3 2008.5.30.1 2008.06.04 -
AntiVir 7.8.0.26 2008.06.04 TR/DNSChanger.TG
Authentium 5.1.0.4 2008.06.04 -
Avast 4.8.1195.0 2008.06.04 Win32:KdCrypt
AVG 7.5.0.516 2008.06.04 DNSChanger.AD
BitDefender 7.2 2008.06.04 -
CAT-QuickHeal 9.50 2008.06.03 -
ClamAV 0.92.1 2008.06.04 -
DrWeb 4.44.0.09170 2008.06.04 -
eSafe 7.0.15.0 2008.06.03 -
eTrust-Vet 31.4.5845 2008.06.03 -
Ewido 4.0 2008.06.03 -
F-Prot 4.4.4.56 2008.06.02 W32/Virtumonde.T.gen!Eldorado
F-Secure 6.70.13260.0 2008.06.04 Trojan.Win32.DNSChanger.dvs
Fortinet 3.14.0.0 2008.06.04 -
GData 2.0.7306.1023 2008.06.04 Trojan.Win32.DNSChanger.dvs
Ikarus T3.1.1.26.0 2008.06.04 -
Kaspersky 7.0.0.125 2008.06.04 Trojan.Win32.DNSChanger.dvs
McAfee 5309 2008.06.03 -
Microsoft 1.3604 2008.06.04 Trojan:Win32/Alureon.gen
NOD32v2 3156 2008.06.03 -
Norman 5.80.02 2008.06.03 -
Panda 9.0.0.4 2008.06.04 -
Prevx1 V2 2008.06.04 -
Rising 20.47.20.00 2008.06.04 -
Sophos 4.29.0 2008.06.04 -
Sunbelt 3.0.1144.1 2008.06.04 -
Symantec 10 2008.06.04 Trojan.Zlob
TheHacker 6.2.92.333 2008.06.03 -
VBA32 3.12.6.7 2008.06.03 -
VirusBuster 4.3.26:9 2008.06.03 -
Webwasher-Gateway 6.6.2 2008.06.04 Trojan.DNSChanger.TG

[病毒样本] notepad.exe

F-Prot 4.4.4

本帖子中包含更多资源

回复 10楼 kato9096 的帖子

回复 17楼 palfan 的帖子