[病毒样本] 5

显示全部楼层 · 发表于 2008-8-8 11:54:29

下载地址：

http://www.google.com.br/images/nav_logo3.png

http://www.negritudis.kit.net/flash.js1

http://www.negritudis.kit.net/msapp.js1

http://www.negritudis.kit.net/mswbm.js1

http://www.negritudis.kit.net/twain32.js1

显示全部楼层 · 发表于 2008-8-8 11:58:11

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus.rar'
C:\Documents and Settings\Administrator\桌面\virus.rar
[0] Archive type: RAR
   --> msapp.js1
      [DETECTION] Contains HEUR/Malware suspicious code
--> twain32.js1
   [DETECTION] Is the TR/Spy.Gen Trojan
--> mswbm.js1
   [DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-8-8 12:26:52

Sign of "Win32:Spyware-gen [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\virus.rar\mswbm.js1" file.

显示全部楼层 · 发表于 2008-8-8 12:52:57

ess pass
上报

显示全部楼层 · 发表于 2008-8-8 13:13:12

Sign of "Win32:Spyware-gen [Trj]" has been found in "E:\download\virus.rar\mswbm.js1" file.

显示全部楼层 · 发表于 2008-8-8 13:31:11

已删除：木马程序 Trojan-Downloader.Win32.Dadobra.axb 文件: E:\Documents and Settings\Administrator.CHINA-F0FD45973\桌面\mswbm.js1
已删除：木马程序 Trojan-Downloader.Win32.Dadobra.atr 文件: E:\Documents and Settings\Administrator.CHINA-F0FD45973\桌面\twain32.js1
已删除：木马程序 Backdoor.Win32.Hupigon.ddpv 文件: E:\Documents and Settings\Administrator.CHINA-F0FD45973\桌面\flash.js1//ASPack

显示全部楼层 · 发表于 2008-8-8 14:33:29

卡巴杀3漏2

已删除：木马程序 Backdoor.Win32.Hupigon.ddpv 文件　: D:\软件\其它\v\k\new\1\virus.rar/flash.js1//ASPack
已删除：木马程序 Trojan-Downloader.Win32.Dadobra.atr 文件　: D:\软件\其它\v\k\new\1\virus.rar/twain32.js1
已删除：木马程序 Trojan-Downloader.Win32.Dadobra.axb 文件　: D:\软件\其它\v\k\new\1\virus.rar/mswbm.js1

TO KL

显示全部楼层 · 发表于 2008-8-8 15:06:41

2008/8/8 15:06:12 已清除木马程序 Backdoor.Win32.Hupigon.ddpv G:\Temp\Virus\virus.rar/flash.js1//ASPack
2008/8/8 15:06:12 已清除木马程序 Trojan-Downloader.Win32.Dadobra.atr G:\Temp\Virus\virus.rar/twain32.js1
2008/8/8 15:06:12 已清除木马程序 Trojan-Downloader.Win32.Dadobra.axb G:\Temp\Virus\virus.rar
2008/8/8 15:06:12 已清除木马程序 Trojan-Downloader.Win32.Dadobra.axb G:\Temp\Virus\virus.rar/mswbm.js1

显示全部楼层 · 发表于 2008-8-8 15:38:45

金山 0

显示全部楼层 · 发表于 2008-8-8 16:15:54

Hello,

msapp.js1 - Trojan-Banker.Win32.Banker.tqx

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

nav_logo3.png

No malicious code was found in this file.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: virus.rar