PCSL 可疑恶意网站每日分析 20081028

显示全部楼层 · 发表于 2008-10-28 14:39:44

http://67.15.107.166/winzix/070529/winzix-1.0-setup-0001.exe
http://ad.ote2008.info/ad.css
http://knut.kumoh.ac.kr/~kopress/board//skin/f2plus_gallery_2_0/.tmp/FrWall2.exe
http://dd4.tesekl.info/not.exe
http://dd6.tesekl.info/net.exe
http://www.ieqpatobranco.com.br/fotos.exe
http://cri66.web.cedant.com/windows.exe
http://avzhan.3322.org:81/1.exe

复制代码

显示全部楼层 · 发表于 2008-10-28 15:09:42

Begin scan in 'E:\Download\Virus\Virus.rar'
E:\Download\Virus\Virus.rar
[0] Archive type: RAR
--> winzix-1.0-setup-0001.exe
   [DETECTION] Contains recognition pattern of the DR/FraudTool.WinZix.A.1 dropper
--> 1.exe
   [DETECTION] Is the TR/Spy.Gen Trojan
   --> ad.css
      [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
--> fotos.exe
   [DETECTION] Is the TR/Banker.Banker.wvb Trojan
--> FrWall2.exe
   [DETECTION] Is the TR/Spy.Banker.619520 Trojan
   --> net.exe
      [DETECTION] Is the TR/Dldr.Agent.dfq Trojan
   --> not.exe
      [DETECTION] Is the TR/Dldr.Agent.dfq Trojan
--> windows.exe
   [DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-10-28 19:36:25

2008/10/28 19:33:17 已清除木马程序 Trojan-Downloader.Win32.Delf.nmh G:\Temp\Virus\20081028.rar/not.exe//PE_Patch.UPX//UPX
2008/10/28 19:33:17 已清除木马程序 Trojan-Downloader.Win32.Delf.nmh G:\Temp\Virus\20081028.rar/net.exe//PE_Patch.UPX//UPX
2008/10/28 19:33:17 已清除木马程序 Trojan.Win32.Delf.eyb G:\Temp\Virus\20081028.rar/FrWall2.exe
2008/10/28 19:33:17 已清除木马程序 Trojan-Banker.Win32.Banker.wvb G:\Temp\Virus\20081028.rar/fotos.exe//PE_Patch//TeLock//PE_Patch//NTKrnl
2008/10/28 19:33:17 已清除木马程序 Trojan-Downloader.Win32.Small.aacq G:\Temp\Virus\20081028.rar/ad.css//UPX
2008/10/28 19:33:17 已清除木马程序 Trojan.Win32.Obfuscated.en G:\Temp\Virus\20081028.rar/winzix-1.0-setup-0001.exe//file7
2008/10/28 19:33:17 已清除木马程序 Trojan-Banker.Win32.Banker.yhq G:\Temp\Virus\20081028.rar/windows.exe//PKLite32
2008/10/28 19:33:13 已隔离木马程序 Heur.Trojan.Generic G:\Temp\Virus\20081028.rar/1.exe
2008/10/28 19:33:17 已清除病毒 not-a-virus:FraudTool.Win32.WinZix.a G:\Temp\Virus\20081028.rar/winzix-1.0-setup-0001.exe//file2
2008/10/28 19:33:17 已清除病毒 not-a-virus:FraudTool.Win32.WinZix.a G:\Temp\Virus\20081028.rar/winzix-1.0-setup-0001.exe//file1

1.exe  To Kl

显示全部楼层 · 发表于 2008-10-28 21:00:32

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Tatarinov Ivan
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

> Attachment: 1.rar

显示全部楼层 · 发表于 2008-10-28 21:03:12

第二个报

显示全部楼层 · 发表于 2008-10-28 21:26:58

mcafee8.7

[已鉴定] PCSL 可疑恶意网站每日分析 20081028

回复 1楼 lanvin 的帖子

评分