查看: 2453|回复: 14
收起左侧

[病毒样本] 9

[复制链接]
sam.to
发表于 2008-6-10 20:03:25 | 显示全部楼层 |阅读模式
中毒后会以下的服務



To kl,antivir,pc security labs

Hello.
New malicious software was found in the attached files.
Its detection will be included in the next update. Thank you for your help.
-----------------
Regards, Vladimir Lebedev
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com


Filename         Result
TDSAFDUJSY.exe2          MALWARE

The file 'TDSAFDUJSY.exe2' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates.
Filename         Result
QLRVTQETBITE.tmp          CLEAN

The file 'QLRVTQETBITE.tmp' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Filename         Result
slrundll.exe2          CLEAN

The file 'slrundll.exe2' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Filename         Result
TKWWXYGPRP.dll          MALWARE

The file 'TKWWXYGPRP.dll' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates.
Filename         Result
utoyxqhcpqwa.bat2          CLEAN

The file 'utoyxqhcpqwa.bat2' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Filename         Result
taskman.exe2          KNOWN CLEAN

The file 'taskman.exe2' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows XP (SP0)'.
Filename         Result
TASKMAN.EXE666          KNOWN CLEAN

The file 'TASKMAN.EXE666' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows XP (SP0)'.

[ 本帖最后由 kato9096 于 2008-6-10 22:36 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
电影结束了
发表于 2008-6-10 20:20:10 | 显示全部楼层
BD全挂。。。
怀疑slrundll.exe  taskman.exe TASKMAN.EXE
不是病毒。。。

TF战绩。。。
和刚刚那个名字为7的贴子的行为类似
各生成BAT内容一致




[ 本帖最后由 电影结束了 于 2008-6-10 20:54 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
hahacomcn
发表于 2008-6-10 20:20:47 | 显示全部楼层
最近真是不太平啊。

to vlab。
电影结束了
发表于 2008-6-10 20:21:58 | 显示全部楼层
红伞也全挂
hahacomcn
发表于 2008-6-10 20:22:04 | 显示全部楼层
25041811  QLRVTQETBITE.tmp  2.94 KB  CLEAN
25041812  VAZQYCPJQA.exe2  68 KB  MALWARE
25019061  slrundll.exe2  32.1 KB  CLEAN
25041813  TKWWXYGPRP.dll  28 KB  MALWARE
25041967  utoyxqhcpqwa.bat2  1.25 KB  UNDER ANALYSIS
206786  taskman.exe2  15 KB  KNOWN CLEAN
206786  TASKMAN.EXE666  15 KB  KNOWN CLEAN
hahacomcn
发表于 2008-6-10 20:22:42 | 显示全部楼层
原帖由 电影结束了 于 2008-6-10 20:21 发表
红伞也全挂


是啊,,最近红伞的表现有点反常。。。
sam.to
 楼主| 发表于 2008-6-10 20:28:42 | 显示全部楼层

回复 5楼 hahacomcn 的帖子

你又上报
ssy275
发表于 2008-6-10 20:33:26 | 显示全部楼层
费尔KIS8全挂
qigang
发表于 2008-6-10 20:38:36 | 显示全部楼层

10/1

瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Trojan.Script.BAT.Agent.e

MAC 地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:20.48.12
挪威的冬天
发表于 2008-6-10 20:52:02 | 显示全部楼层
信息        2008-06-10  20:51:47        您此次查毒清除了1个病毒                       
信息        2008-06-10  20:51:47        您此次查毒共查出1个病毒以及危险代码                       
信息        2008-06-10  20:51:47        您此次查毒共查了内存模块0个,磁盘引导扇区0个,文件10个                       
信息        2008-06-10  20:51:47        金山毒霸主程序查毒过程结束,查毒方式:命令行查毒                       
病毒        2008-06-10  20:51:45        D:\Desktop\9.rar\QLRVTQETBITE.tmp        Win32.Troj.Rootkit.ap.3008        清除成功
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-6 21:41 , Processed in 0.135927 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表