sysdrvwin.exe

显示全部楼层 · 发表于 2008-8-16 17:07:28

Kaspersky miss
TO KL

显示全部楼层 · 发表于 2008-8-16 17:09:43

这个我去..

[ 本帖最后由 kato9096 于 2008-8-16 17:10 编辑 ]

显示全部楼层 · 发表于 2008-8-16 17:12:23

卡巴有人抢着上报。。。。~

显示全部楼层 · 发表于 2008-8-16 17:26:05

创建C:\WINDOWS\SYSTEM32\ATSPY.SYS

创建C:\WINDOWS\SYSTEM32\DRIVERS\AEC.SYS.BAK

显示全部楼层 · 发表于 2008-8-16 17:27:17

The file 'sysdrvwin.exe' has been determined to be 'UNDER ANALYSIS'.

显示全部楼层 · 发表于 2008-8-16 17:46:43

卡巴 0

KV 0

显示全部楼层 · 发表于 2008-8-16 18:48:01

这个sysdrv比较强悍
TF没反应找不到实体文件 is,wsys禁止创建线程都结束不掉监听端口但无具体ip.

显示全部楼层 · 发表于 2008-8-16 18:52:37

RS20.57.52未杀！

显示全部楼层 · 发表于 2008-8-16 18:58:12

Hello,

sysdrvwin.exe_ - Trojan.Win32.Pakes.kcq

New malicious software was found in this file. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: sysdrvwin.zip

[病毒样本] sysdrvwin.exe

回复 2楼 sbbdms 的帖子

所以我说想用卡巴

2/0

浏览过的版块