100%downlist

显示全部楼层 · 发表于 2008-6-8 13:10:42

原帖由 kato9096 于 2008-6-8 00:27 发表
有沒有上报Heur.Trojan.Generic??

上报了，卡巴启发的病毒我是不会漏掉的

Hello.
New malicious software was found in the attached files.
Its detection will be included in the next update. Thank you for your help.
-----------------
Regards, Vladimir Lebedev
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

> Attachment: wow.rar

显示全部楼层 · 发表于 2008-6-8 18:51:05

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Backdoor.Win32.Remote.c
病毒： Backdoor.Win32.Remote.c

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.47.60

显示全部楼层 · 发表于 2008-6-8 21:31:19

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\wow.rar<RAR>:wow.exe <- Trojan.Agent.Qxg : No action
C:\Documents and Settings\All Users\Documents\Test\wow.rar<RAR>:kn.exe<DLLRES>:KEY0.exe <- Trojan.Pws.Delf.Jv : No action

Scanned objects : 5

Infected objects : 2

显示全部楼层 · 发表于 2008-6-8 21:31:43

[Found possible security risk] <W32/Heuristic-210!Eldorado (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\wow.rar->wow.exe->(NSPack)->(PE_Patch)->(NSPack)->(PE_Patch)
[Found possible virus] <W32/Threat-HLLSI-based!Maximus (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\wow.rar->kn2.exe
[Found Trojan] <W32/Trojan2.AKQM (exact, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\wow.rar->kn.exe

---------------------------------------------------------------------
Scan ended: 2008-6-8, 21:31:39
Duration: 0:00:05

Scan result:

Scanned files:    6
Infected objects:    3
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-6-8 21:51:38

结果: 找到 3 恶意软件
Trojan.Win32.Agent.reg (病毒)
F:\wow.rar\wow.exe
Trojan.Win32.AutoRun.d (病毒)
F:\wow.rar\kn2.exe
Trojan.Win32.Delf.bmo (病毒)
F:\wow.rar\kn.exe

[病毒样本] 100%downlist

6/2

ArcaVir2008

F-Prot 4.4.4