[病毒样本] 10

显示全部楼层 · 发表于 2008-6-7 13:35:49

[:1:]
http://bbs.kafan.cn/viewthread.php?tid=265026&extra=page%3D1
的生成物

显示全部楼层 · 发表于 2008-6-7 13:38:20

卡巴飘

显示全部楼层 · 发表于 2008-6-7 13:39:38

25039293  QGHUMEAYLNLF.dll  28 KB  UNDER ANALYSIS
25039289  lszlsbgwj.exe  52 KB  UNDER ANALYSIS
25039294  WFNFOZVSRT.tmp  2.81 KB  UNDER ANALYSIS
25039283  YOOYVE.exe  64 KB  UNDER ANALYSIS
25039295  innlylqjawbwd.bat  1.16 KB  UNDER ANALYSIS
25039296  avk.exe  821 KB  UNDER ANALYSIS
3819133  ~DF40E.tmp  240 KB  CLEAN
3718617  ~DFFFEE.tmp  128 KB  CLEAN

显示全部楼层 · 发表于 2008-6-7 13:40:19

RS20.47.50未杀！

显示全部楼层 · 发表于 2008-6-7 13:41:02

Begin scan in 'C:\Documents and Settings\Administrator\桌面\user.rar'
C:\Documents and Settings\Administrator\桌面\user.rar
  [0] Archive type: RAR
  --> avk.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-6-7 13:49:44

金山飘～

显示全部楼层 · 发表于 2008-6-7 16:01:13

Kaspersky miss all!!!!

TO KL

显示全部楼层 · 发表于 2008-6-7 18:41:25

Hello,

#DF40E.tmp, #DFD0C2.tmp, #DFFFEE.tmp

No malicious code were found in these files.

avk.exe_ - Trojan-Downloader.Win32.Agent.sea,
innlylqjawbwd.bat_ - Trojan.Win32.KillAV.uc,
lszlsbgwj.exe_, QGHUMEAYLNLF.dll, updqkquasv.exe_ - Trojan.Win32.Agent.rdi,
WFNFOZVSRT.tmp - Rootkit.Win32.Agent.apz,
YOOYVE.exe_ - Trojan-Downloader.Win32.Agent.seb

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: user.rar

显示全部楼层 · 发表于 2008-6-7 20:27:42

[Found possible virus] <W32/NewMalware-Rootkit-I-based!Maximus (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\user.rar->updqkquasv.exe
[Found possible virus] <W32/NewMalware-Rootkit-I-based!Maximus (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\user.rar->lszlsbgwj.exe

---------------------------------------------------------------------
Scan ended: 2008-6-7, 20:27:29
Duration: 0:00:01

Scan result:

Scanned files:    6
Infected objects:    2
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

[病毒样本] 10

本帖子中包含更多资源

11/0

F-Prot 4.4.4