又一次召唤冷冷

显示全部楼层 · 发表于 2008-6-8 00:11:40

http://ageofconans.net/4561.swf

http://ageofconans.net/4562.swf

TO KL

Hello.
New malicious software was found in the attached file.
4561.swf detected Exploit.SWF.Downloader.al
4562.swf detected Exploit.SWF.Downloader.am
Its detection will be included in the next update. Thank you for your help.
-----------------
Regards, Vladimir Lebedev
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

> Attachment: 45623.rar

[ 本帖最后由 sbbdms 于 2008-6-8 13:12 编辑 ]

显示全部楼层 · 发表于 2008-6-8 00:26:28

http://ageofconans.net/4561.swf
-->
http://ageofconans.net/WIN%209,0,115,0i.swf
-->>
http://ageofconans.net/flash.exe

显示全部楼层 · 发表于 2008-6-8 00:31:20

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... 63&t=1212856182
Information: Is the Trojan horse TR/Crypt.NSPM.Gen

--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.55, VDF 7.0.4.156

显示全部楼层 · 发表于 2008-6-8 00:32:42

http://ageofconans.net/d.txt

Down:
http://ageofconans.net/ww.exe
http://ageofconans.net/ns.exe
http://ageofconans.net/new.exe

显示全部楼层 · 发表于 2008-6-8 02:44:03

正在扫描日志
病毒库版本: 3165 (20080606)
日期: 08-06-08 时间: 2:44:15
已扫描的磁盘、文件夹和文件: D:\Downloads\NewFiles\ww.rar
D:\Downloads\NewFiles\ww.rar > RAR > ww.exe - Win32/TrojanDropper.Agent.NKK 特洛伊木马 - 是已删除对象的一部分
D:\Downloads\NewFiles\ww.rar > RAR > ns.exe - 可能是 Win32/Genetik 特洛伊木马的变种 - 是已删除对象的一部分
D:\Downloads\NewFiles\ww.rar > RAR > new.exe - Win32/AutoRun.NAD 病毒 - 是已删除对象的一部分
已扫描的对象数: 3
发现的威胁数: 3
已清除对象数:3
完成时间: 2:44:16 总扫描时间: 1 秒 (00:00:01)

显示全部楼层 · 发表于 2008-6-8 08:31:19

偶像

显示全部楼层 · 发表于 2008-6-8 08:53:42

原帖由 sbbdms 于 2008-6-8 00:11 发表
 http://ageofconans.net/4561.swf

http://ageofconans.net/4562.swf

281217

TO KL

显示全部楼层 · 发表于 2008-6-8 09:38:37

扫描系统区域...
扫描所选择的目录和文件...
对象: flash.exe
在压缩档案里: F:\flash.rar
Status: 已发现病毒
病毒: MemScan:Win32.Worm.Otwycal.T (BD 引擎)
对象: flash.rar
路径: F:
Status: 已发现病毒
病毒: MemScan:Win32.Worm.Otwycal.T (BD 引擎)
对象: ww.exe
在压缩档案里: F:\ww.rar
Status: 已发现病毒
病毒: MemScan:Trojan.PWS.OnLineGames.WOM (BD 引擎)
对象: ns.exe
在压缩档案里: F:\ww.rar
Status: 已发现病毒
病毒: Generic.Malware.SBdldg.E5FA497B (BD 引擎)
对象: new.exe
在压缩档案里: F:\ww.rar
Status: 已发现病毒
病毒: MemScan:Win32.Worm.Otwycal.T (BD 引擎)
对象: ww.rar
路径: F:
Status: 已发现病毒
病毒: MemScan:Trojan.PWS.OnLineGames.WOM, Generic.Malware.SBdldg.E5FA497B, MemScan:Win32.Worm.Otwycal.T (BD 引擎)

显示全部楼层 · 发表于 2008-6-8 10:53:52

Begin scan in 'C:\Documents and Settings\Administrator\桌面\new.exe'
C:\Documents and Settings\Administrator\桌面\new.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [NOTE]    A backup was created as '48c24a1f.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\ns.exe'
C:\Documents and Settings\Administrator\桌面\ns.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Backdoor.Gen Backdoor server programs
   [NOTE]    A backup was created as '48794a2d.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\ww.exe'
C:\Documents and Settings\Administrator\桌面\ww.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [NOTE]    A backup was created as '48794a31.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-6-8 10:57:50

原帖由 tanlimo 于 2008-6-8 00:26 发表
 http://ageofconans.net/4561.swf
-->
http://ageofconans.net/WIN%209,0,115,0i.swf
-->>
http://ageofconans.net/flash.exe

偶像，too

[病毒样本] 又一次召唤冷冷

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

回复 4楼 tanlimo 的帖子

本帖子中包含更多资源