黄色心变种木马，新型木马各位注意咯

molicn

最新的变种木马，希望大家注意咯。红伞只杀到一个
Virus or unwanted program 'DR/Dldr.AutoIt.GW.1 [dropper]'
detected in file 'J:\新建文件夹 (2)\uusee.exe.
Action performed: Allow access

雨宫优子

红伞只报一个
微点两个：
程序:
C:\DOCUMENTS AND SETTINGS\***.18F12FE200FB45E\桌面\ANTI-VIRUS LAB\RUN VIRUS LAB\NIUNIU.EXE
是否删除木马程序及其衍生物?
————————
程序:
C:\DOCUMENTS AND SETTINGS\***.18F12FE200FB45E\桌面\ANTI-VIRUS LAB\RUN VIRUS LAB\UUSEE.EXE
是否删除木马程序及其衍生物?
————————————————————————————————————————————
但是那个pps.exe似乎一运行就退出了..
可能是因为沙盘或者组策略？
pps.exe报告（毛豆沙盘）：
http://camas.comodo.com/cgi-bin/submit?file=c7b5e37278942cd6ba62cb8aaceaef97c413232a8d438bc6d8ead96b02a5b78d
threatexpert报告：
http://www.threatexpert.com/report.aspx?md5=49018f28e26ea4144cccd2e55f34cc2b
OMG~~，真够长的.....

[ 本帖最后由 aarwwefdds 于 2008-9-16 22:06 编辑 ]

Kitman

Begin scan in 'C:\Users\TOSHIBA\Downloads\Vislog'
C:\Users\TOSHIBA\Downloads\Vislog\uusee.exe
    [DETECTION] Contains recognition pattern of the DR/Dldr.AutoIt.GW.1 dropper
    [NOTE]      A backup was created as '4942b71c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2008年9月16日  21:37
Used time: 00:02 Minute(s)

The scan has been done completely.

      1 Scanning directories
      3 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      0 Archives were scanned
      0 Warnings
      1 Notes

File ID	Filename	Size (Byte)	Result
25135416	niuniu.exe	252.36 KB	CLEAN
25135417	pps.exe	252.19 KB	CLEAN
25135418	uusee.exe	312.54 KB	MALWARE

[ 本帖最后由 Kitman 于 2008-9-16 22:29 编辑 ]

qigang

图标变漂亮了！

虫眼

虚拟机懒得开，不试行为了。

qigang

RS20.62.12未杀！

Palkia

直接上报金山~

无尽藏海

2008-9-16 21:43:08        Task started                       
2008-9-16 21:43:09        Detected: Heur.Downloader        D:\Virus\Vislog.rar/niuniu.exe               
2008-9-16 21:43:10        Detected: Heur.Downloader        D:\Virus\Vislog.rar/pps.exe               
2008-9-16 21:43:10        Detected: Trojan-Downloader.Win32.AutoIt.gw        D:\Virus\Vislog.rar/uusee.exe/PE_Patch.UPX/UPX/script.au3

wangjay1980

2008-9-16 JAY21:38:38        Detected: Trojan-Downloader.Win32.AutoIt.gw        C:\Documents and Settings\Owner\桌面\Vislog.rar/uusee.exe/PE_Patch.UPX/UPX/script.au3
2008-9-16 JAY21:47:54 Detected: Heur.Downloader C:\Documents and Settings\Owner\桌面\niuniu.exe  
2008-9-16 JAY21:47:53 Detected: Heur.Downloader C:\Documents and Settings\Owner\桌面\pps.exe

[ 本帖最后由 wangjay1980 于 2008-9-16 21:49 编辑 ]

nansheng3639

卡巴4个