9

sam.to

99483666be796c02447ae0d4f8f95e6a  admshare.dat
91d213f0735a7b32488e658b3f86cd41  Autorun.inf2
344c39137c5900d1c4a36e3aaddba593  caold.dll3
aeca0c98daa541cf1e5dc1222049d931  Mourn_Operator1`1.exe3
1eb5cde74e62615c9a061cda30706d62  msrgg.dll3
b29f5cf262010a7b1d300deb81e33a05  sleep.exe2
e16b0da38cc0badb528826ad5683f6f2  sysme.bat2
f6ab74fa085fa8fd1eab0f6ea50cd652  Tasks.xxx
380e545d52508fd12f2cff3ede7fd3e9  xqh.dll3


已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.wjh        檔案: C:\Documents and Settings\kato9096\桌面\52651323\caold.dll3
已刪除: 病毒 Worm.Win32.AutoRun.djf        檔案: C:\Documents and Settings\kato9096\桌面\52651323\Mourn_Operator1`1.exe3
已刪除: 病毒 Worm.Win32.AutoRun.dja        檔案: C:\Documents and Settings\kato9096\桌面\52651323\Autorun.inf2

3个,有6个不报.

不报的上报卡巴


Hello.
New malicious software was found in the attached file ().
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

-----------------
Regards, Kirill Erakhtin
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 kato9096 于 2008-8-2 14:23 编辑 ]

allinwonderi

[Scanning : C:\Download Files]


C:\Download Files\#$%^$%^.rar<RAR>:Mourn_Operator1`1.exe3 <- Worm.Autorun.Djf : No action
C:\Download Files\#$%^$%^.rar<RAR>:Autorun.inf2 <- Worm.Autorun.Dja : No action



Scanned objects : 11

Infected objects : 2

allinwonderi

[发现可能为特洛伊木马：]        <W32/Heuristic-VFM!Eldorado (not disinfectable)>        C:\Download Files\#$%^$%^.rar->msrgg.dll3
[发现后门：]        <W32/Backdoor2.BRIT (确切, not disinfectable)>        C:\Download Files\#$%^$%^.rar->Mourn_Operator1`1.exe3

---------------------------------------------------------------------
扫描已结束:        2008-7-29, 21:14:53
用时:        0:00:06

扫描结果:

已扫描的文件:                 6
已感染的对象:         2
已清除的对象:         0
已隔离的文件:         0
---------------------------------------------------------------------

allinwonderi

dadingdading

kv 认识一个  

元谋人

sophos 2个

nosferatu

Begin scan in 'C:\Documents and Settings\Administrator\桌面\_$%^$%^.rar'
C:\Documents and Settings\Administrator\桌面\_$%^$%^.rar
    [0] Archive type: RAR
    --> msrgg.dll3
      [DETECTION] Is the TR/ATRAPS.Gen Trojan
    --> Mourn_Operator1`1.exe3
      [DETECTION] Contains recognition pattern of the WORM/Autorun.73728 worm
    --> caold.dll3
      [DETECTION] Is the TR/Agent.oxu Trojan
    [NOTE]      The file was deleted!

wangjay1980

去掉4个垃圾文件

还有两个可疑文件

Love=卡巴+费尔

费尔

woai_jolin

Scan Log
Version of virus signature database: 3306 (20080729)
Date: 2008-7-29  Time: 22:32:24
Scanned disks, folders and files: G:\v\_$%^$%^
G:\v\_$%^$%^\admshare.dat - is OK
G:\v\_$%^$%^\Autorun.inf2 - probably a variant of Win32/Autorun worm - cleaned by deleting - quarantined [1]
G:\v\_$%^$%^\caold.dll3 - a variant of Win32/Agent.NQM trojan - cleaned by deleting - quarantined [1]
G:\v\_$%^$%^\Mourn_Operator1`1.exe3 - a variant of Win32/AutoRun.ARX worm - cleaned by deleting - quarantined [1]
G:\v\_$%^$%^\msrgg.dll3 - is OK
G:\v\_$%^$%^\sleep.exe2 - is OK
G:\v\_$%^$%^\sysme.bat2 - is OK
G:\v\_$%^$%^\Tasks.xxx - is OK
G:\v\_$%^$%^\xqh.dll3 &raquo; UPX v12_m2_dll - is OK
Number of scanned objects: 9
Number of threats found: 3
Number of cleaned objects: 3
Time of completion: 22:32:25  Total scanning time: 1 sec (00:00:01)

Notes:
[1] Object has been deleted as it only contained the virus body.