[病毒样本] 4

显示全部楼层 · 发表于 2008-7-28 16:29:06

823e0d7f72aae58d93fa2fe0e22fe30e  autorun.inf3
b3268b917a93e166807c82770ba61b2b  Recycled.exe
e16b0da38cc0badb528826ad5683f6f2  sysme.bat3
b3268b917a93e166807c82770ba61b2b  新建文件夹.exe3

新建文件夹是使用文件夹的图標的

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.VB.eql 檔案: C:\Documents and Settings\kato9096\桌面\Recycled\Recycled\autorun.inf3

不报的已上报到卡巴

Hello.
New malicious software was found in the attached file. Trojan-Downloader.Win32.VB.gdy
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Tatarinov Ivan
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

[ 本帖最后由 kato9096 于 2008-7-28 19:33 编辑 ]

显示全部楼层 · 发表于 2008-7-28 16:30:52

F:\VIRUS\Recycled---\Recycled\Recycled\Recycled.exe DeepScan:Generic.Malware.SFMb.9A153EEC
F:\VIRUS\Recycled---\Recycled\Recycled\新建文件夹.exe3 DeepScan:Generic.Malware.SFMb.9A153EEC

显示全部楼层 · 发表于 2008-7-28 16:33:27

Recycled.exe和新建文件夹.exe3是一样的

显示全部楼层 · 发表于 2008-7-28 16:35:01

...2

显示全部楼层 · 发表于 2008-7-28 16:35:16

2008-7-28 16:33:49 Kernel File 'F:\VIRUS\Recycled---\Recycled\Recycled.rar' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-7-28 16:38:25

2008-7-28 16:37:54 Kernel File 'G:\v\Recycled\Recycled\sysme.bat' was sent to ESET for analysis.
2008-7-28 16:37:48 Kernel File 'G:\v\Recycled\Recycled\新建文件夹.exe' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-7-28 17:05:50

BD 2个deepscan

显示全部楼层 · 发表于 2008-7-28 17:27:26

新建文件夹.EXE

创建文件

删除文件,

改注册表自启动

再次创建文件
联网么

[ 本帖最后由 vanbasten111 于 2008-7-28 17:35 编辑 ]

显示全部楼层 · 发表于 2008-7-28 19:33:38

Hello.
New malicious software was found in the attached file. Trojan-Downloader.Win32.VB.gdy
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Tatarinov Ivan
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2008-7-28 19:37:07

McAfee报了2个。。。