转：lscan2.exe（50次发威）

solcroft

AVG: 0

hzyw

nis2009 扫描被过了哦，还好有微点

释放产物，删除自身，添加自启动

跑着还没进一步反应

中国崛起

费尔 miss
avast miss
小红伞 miss again

左手

2008-10-24 15:28:59    创建文件      操作:阻止
进程路径:E:\test\lscan2.exe
文件路径:C:\WINDOWS\System32\rs32net.exe
触发规则:所有程序规则->可执行文件规则->%windir%\*.exe


2008-10-24 15:29:00    运行应用程序      操作:阻止
进程路径:E:\test\lscan2.exe
文件路径:C:\WINDOWS\system32\cmd.exe
命令行:del E:\test\lscan2.exe >> NUL
触发规则:所有程序规则->禁止该位置->%windir%\*

尤金卡巴斯基

Sophos

2.79.0

4.34

2008-10-24

Mal/Pushdo-A

1.944

To Kl

[ 本帖最后由 尤金卡巴斯基 于 2008-10-24 17:09 编辑 ]

中国崛起

只有一家报

mofunzone

上报2分钟后
The file 'lscan2.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Drop.Kobcka.ES. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

尤金卡巴斯基

Hello.
New malicious software was found in the attached file. Trojan.Win32.Buzus.acfv
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Tatarinov Ivan
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com


> Attachment: lscan2.zip

欠妳緈諨

应该是52次了