6个卡巴不报的(卡巴已回信)

显示全部楼层 · 发表于 2008-9-30 16:53:56

已上报
f89a51ec126fb585ce72728b989c5b09 sk10.exe@
091dd5f980da2e45d0c3d090a53d3090 sk06.exe@
a6be083ba90d5c83ab8e3737f2b6c0e5 a24.exe@
233211554eb38922c6f3efce48c9e634 a11.exe@
73f14bc582a1be5481925534a599b948 23.exe@
dde900be97cb730b7b2cc2c0434493a1 sk33.exe@
42e5ed1af4c7c8df4f779a607b930447 sk23.exe@
f5b09ff37fb084209606cc24fb0d745f sk22.exe@
175753906c0e6ec6c7fb37d273466b4b sk13.exe@

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Gashkin Alexey
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

[ 本帖最后由 kato9096 于 2008-9-30 18:44 编辑 ]

显示全部楼层 · 发表于 2008-9-30 17:02:22

Begin scan in 'E:\Download\Virus\852.rar'
E:\Download\Virus\852.rar
E:\Download\Virus\852.rar
[0] Archive type: RAR
   --> 852\a11.exe@
      [1] Archive type: OVL
      --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the TR/PSW.OnlineGames.ZWI Trojan
--> 852\a24.exe@
   [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
   --> 852\sk06.exe@
      [DETECTION] Is the TR/PSW.Online.tdy Trojan
--> 852\sk10.exe@
   [DETECTION] Is the TR/Dropper.Gen Trojan
--> 852\sk13.exe@
   [DETECTION] Is the TR/Dropper.Gen Trojan
   --> 852\sk22.exe@
      [1] Archive type: OVL
      --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the TR/PSW.OnlineGames.ZWI Trojan
--> 852\sk23.exe@
   [DETECTION] Is the TR/Dropper.Gen Trojan
--> 852\sk33.exe@
   [DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-9-30 17:03:55

扫描结果9个灭8剩1

显示全部楼层 · 发表于 2008-9-30 17:55:09

2008-9-30 JAY17:53:18 Detected Trojan program Heur.Invader High Heuristic analysis C:\Documents and Settings\Owner\桌面\852\a24.exe@
2008-9-30 JAY17:53:18 Detected Trojan program Heur.Trojan.Generic High Probably C:\Documents and Settings\Owner\桌面\852\sk33.exe@
2008-9-30 JAY17:53:17 Detected Trojan program Heur.Trojan.Generic High Probably C:\Documents and Settings\Owner\桌面\852\sk23.exe@
2008-9-30 JAY17:53:17 Detected Trojan program Heur.Trojan.Generic High Partial C:\Documents and Settings\Owner\桌面\852\sk22.exe@/PE_Patch/UPack/data0000
2008-9-30 JAY17:53:16 Detected Trojan program Heur.Trojan.Generic High Probably C:\Documents and Settings\Owner\桌面\852\sk13.exe@
2008-9-30 JAY17:53:16 Detected Trojan program Heur.Trojan.Generic High Probably C:\Documents and Settings\Owner\桌面\852\sk10.exe@
2008-9-30 JAY17:53:15 Detected Trojan program Heur.Trojan.Generic High Probably C:\Documents and Settings\Owner\桌面\852\sk06.exe@
2008-9-30 JAY17:53:15 Detected Trojan program Heur.Trojan.Generic High Partial C:\Documents and Settings\Owner\桌面\852\a11.exe@/PE_Patch/UPack/data0000
2008-9-30 JAY17:53:15 Detected Trojan program Trojan-GameThief.Win32.OnLineGames.tjec High Exact C:\Documents and Settings\Owner\桌面\852\23.exe@/#

显示全部楼层 · 发表于 2008-9-30 17:56:48

norman 7.10 11灭7

显示全部楼层 · 发表于 2008-9-30 17:57:09

用的是卡巴的新启发引擎？

显示全部楼层 · 发表于 2008-9-30 17:58:33

卡巴已经可以查杀了一些~~
onlinegames

显示全部楼层 · 发表于 2008-9-30 18:03:09

并没更新启发引擎，更新的是其它的部件

显示全部楼层 · 发表于 2008-9-30 18:09:16

使用 G DATA AntiVirus 进行病毒检测
版本 19.0.8234.790
病毒特征库日期 30.09.2008
开始时间: 30.09.2008 18:05
引擎: 引擎 A - BitDefender (AVA 19.609), 引擎 B - Avast! (AVB 19.44)
高启发: 开启
文件: 开启
系统区域: 关闭
RootKits 检测: 开启

检测选中目录和文件:
S:\852\

项目: sk10.exe@
路径: S:\852
状态: 病毒，文件已删除
病毒: Trojan.PWS.Lmir.UMH (引擎 A)
项目: a11.exe@
路径: S:\852
状态: 病毒，文件已删除
病毒: Trojan.PWS.OnlineGames.ZWL (引擎 A)
项目: sk13.exe@
路径: S:\852
状态: 病毒，文件已删除
病毒: Trojan.PWS.Lmir.UMH (引擎 A)
项目: sk23.exe@
路径: S:\852
状态: 病毒，文件已删除
病毒: Trojan.PWS.Lmir.UMH (引擎 A)
项目: sk33.exe@
路径: S:\852
状态: 病毒，文件已删除
病毒: Trojan.PWS.Lmir.UMH (引擎 A)
项目: 23.exe@
路径: S:\852
状态: 病毒，文件已删除
病毒: Trojan.PWS.OnlineGames.ZWU (引擎 A)
项目: sk22.exe@
路径: S:\852
状态: 病毒，文件已删除
病毒: Trojan.PWS.OnlineGames.ZWL (引擎 A)
项目: sk06.exe@
路径: S:\852
状态: 病毒，文件已删除
病毒: Trojan.PWS.OnlineGames.ZWU (引擎 A)
项目: a24.exe@
路径: S:\852
状态: 病毒，文件已删除
病毒: Win32:Oliga [Trj] (引擎 B)

检测执行时间: 30.09.2008 18:05
已检测 9 个文件
已发现 9 个病毒文件
已发现 0 个可疑文件

显示全部楼层 · 发表于 2008-9-30 18:36:32

蜘蛛杀4个漏五个～

[病毒样本] 6个卡巴不报的(卡巴已回信)

本帖子中包含更多资源

本帖子中包含更多资源

回复 6楼 syfwxmh 的帖子

浏览过的版块